GRC Specialist

Job Description Managed.sa is seeking a motivated GRC Specialist to support a cybersecurity project based in Jeddah. The ideal candidate will have practical experience in Governance, Risk, and Compliance, with a strong interest in cybersecurity risk management. This role requires working closely with business and technical stakeholders to assess risks, maintain compliance documentation, and support the implementation of cybersecurity controls. Key Responsibilities - Conduct cybersecurity risk assessments and document identified risks. - Maintain risk registers, treatment plans, and follow-up actions. - Support the development and review of cybersecurity policies, procedures, and standards. - Assess compliance with applicable cybersecurity frameworks and regulatory requirements. - Identify control gaps and recommend appropriate remediation actions. - Collect, organize, and review compliance evidence. - Prepare risk and compliance reports for management and project stakeholders. - Monitor remediation activities and follow up with relevant teams. - Support internal and external cybersecurity audits and assessments. - Coordinate with business, IT, cybersecurity, and project stakeholders.

Conduct cybersecurity risk assessments and document identified risks. Maintain risk registers, treatment plans, and follow-up actions. Support the development and review of cybersecurity policies, procedures, and standards. Assess compliance with applicable cybersecurity frameworks and regulatory requirements. Identify control gaps and recommend appropriate remediation actions. Collect, organize, and review compliance evidence. Prepare risk and compliance reports for management and project stakeholders. Monitor remediation activities and follow up with relevant teams. Support internal and external cybersecurity audits and assessments. Coordinate with business, IT, cybersecurity, and project stakeholders.