Governance, Risk, and Compliance Specialist
Riyadh, Riyadh Province, Saudi Arabia · Full Time
Be the first to apply
- Experience
- 2+ yrs
- Salary
- —
- Openings
- 1
- Posted
- 3 weeks ago
- Work mode
- In office
- Education
- Bachelor’s degree
- Eligibility
- Candidates with relevant education and at least 2 years of experience in governance, risk, compliance, cybersecurity auditing, or information security management may apply. Saudi nationals are especially welcome.
- Resume
- Required to apply
Where you'll work
Job description
About the Role
A market-leading IT services company in Saudi Arabia is looking for a Governance, Risk, and Compliance (GRC) Specialist to join its cybersecurity team in Riyadh. The role is centered on building and sustaining a strong cybersecurity governance framework that supports both local and global standards, protects digital assets, and helps the organization stay compliant with regulatory obligations.
What You’ll Do
- Design, roll out, and periodically refine cybersecurity policies, standards, and procedures aligned with ISO 27001, NIST, and COBIT frameworks.
- Carry out in-depth cyber risk assessments, pinpoint threats, and propose practical mitigation actions that fit the organization’s risk appetite.
- Run internal compliance reviews to confirm adherence to Saudi requirements, including NCA ECC/CSCS and SAMA frameworks.
- Track cybersecurity governance indicators and KPIs and prepare updates on the organization’s security posture.
- Assess the security controls of vendors and third-party service providers to verify they meet internal standards.
- Plan and deliver cybersecurity awareness sessions to help build a compliance-minded, security-first culture across the workforce.
What We’re Looking For
The ideal candidate has a background in computer science, cybersecurity, information technology, or a closely related discipline, along with hands-on experience in GRC, cybersecurity auditing, or information security management. A solid grasp of ISO 27001, NIST SP 800-53, and COBIT 5/2019 is important, as is familiarity with Saudi regulatory expectations such as NCA and SAMA. Strong analytical thinking, problem-solving ability, and excellent documentation skills in both Arabic and English are also required.
Additional Information
This opportunity is based in Riyadh, Saudi Arabia, and is a full-time, onsite position. Saudi nationals are especially encouraged to apply. Interested candidates were asked to share their CV by email.