GRC Specialist

About the Role

Managed.sa is actively looking for an enthusiastic GRC Specialist to contribute to a cybersecurity project in Jeddah. This position demands hands-on involvement in Governance, Risk, and Compliance with a strong focus on cybersecurity risk management. The chosen candidate will collaborate closely with both business and IT stakeholders to evaluate risks, maintain compliance documentation, and assist with cybersecurity control implementations.

Key Responsibilities

• Perform assessments to identify cybersecurity risks and document findings.
• Keep updated risk registers, risk treatment plans, and track follow-up actions.
• Assist in creating and reviewing cybersecurity policies, standards, and procedures.
• Evaluate adherence to relevant cybersecurity frameworks and regulatory requirements.
• Detect control deficiencies and suggest suitable remedial measures.
• Gather, organize, and verify evidence for compliance purposes.
• Compile risk and compliance reports for management as well as project stakeholders.
• Oversee corrective action progress and liaise with involved teams.
• Provide support for internal and external cybersecurity audits and assessments.
• Coordinate efforts among business units, IT teams, cybersecurity professionals, and project members.

Candidate Requirements

• Possess a bachelor's degree in Cybersecurity, Information Security, IT, Computer Science, or related disciplines.
• Have 18 to 36 months of relevant experience in cybersecurity Governance, Risk, and Compliance.
• Demonstrate practical knowledge in performing cybersecurity risk assessments and managing those risks.
• Be familiar with recognized cybersecurity frameworks including NCA ECC, ISO 27001, ISO 31000, and the NIST Cybersecurity Framework.
• Exhibit strong capabilities in documentation, reporting, and effective communication with stakeholders.
• Show capability to work independently and proactively manage multiple compliance and risk tasks.
• Hold or be pursuing professional certifications related to GRC, cybersecurity, or risk management (preferred).
• Commit to full-time, on-site work in Jeddah.
• Availability to join promptly is a priority for candidates.