CCDS
Cybersecurity Governance, Risk & Compliance (GRC) Specialist
Riyadh, Saudi ArabiaPosted 1 months ago
Apply link checked 7 days ago
- Salary
- AED 18k–29k a month· est.
- Job type
- Contract
- Level
- Senior
- Field
- Legal & Compliance
- Work mode
- On site
About the role
Location: On-site – Riyadh, Saudi Arabia Contract/engagement: Project-based managed cybersecurity services (13-month) Minimum experience: 6+ years Role Purpose Support the governmental entity's cybersecurity governance, enterprise risk, regulatory compliance, audit readiness, and executive reporting activities. Key Responsibilities · Review and periodically update cybersecurity policies, procedures, standards, and guidelines. · Perform cybersecurity risk assessments covering assets, systems, projects, and third parties. · Maintain the cybersecurity risk register, develop treatment plans, track actions, and align decisions with the entity's approved risk appetite. · Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other applicable national or international frameworks. · Support internal and external audits, prepare evidence, manage non-compliance cases, and follow remediation through closure. · Operate or support eGRC and cybersecurity risk-management tools. · Prepare management reports, executive dashboards, KPIs, compliance status reports, and committee-level presentations.
Requirements
- Technical and Professional Requirements
- · Bachelor’s degree in Computer Science, Information Security, or a related field.
- · At least 6 years of experience in cybersecurity governance, risk, and compliance.
- · Advanced knowledge of Saudi and international cybersecurity frameworks and standards, including NCA controls and ISO/IEC 27001.
- · Proven experience with cybersecurity risk registers, treatment plans, third-party risk, executive reporting, and eGRC tools.
- Personal Requirements
- · Strong stakeholder-management skills and confidence working with senior leadership.
- · Excellent analytical, writing, presentation, and documentation skills.
- · Structured, detail-oriented, accountable, and able to coordinate remediation across multiple teams.
- Professional Certifications
- Preferred: CISSP, CISM, CRISC, or ISO/IEC 27001 Lead Implementer (LI).
Responsibilities
- Key Responsibilities
- • Review and periodically update cybersecurity policies, procedures, standards, and guidelines.
- • Perform cybersecurity risk assessments covering assets, systems, projects, and third parties.
- • Maintain the cybersecurity risk register, develop treatment plans, track actions, and align decisions with the entity's approved risk appetite.
- • Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other applicable national or international frameworks.
- • Support internal and external audits, prepare evidence, manage non-compliance cases, and follow remediation through closure.
- • Operate or support eGRC and cybersecurity risk-management tools.
- • Prepare management reports, executive dashboards, KPIs, compliance status reports, and committee-level presentations.
Skills
- cybersecurity governance
- risk assessment
- compliance and regulatory frameworks
- ISO/IEC 27001
- NCA controls
- eGRC tools
- third-party risk
- risk register management
- executive reporting
- audit readiness
- policy and procedure development
Not sure you fit this role?
Upload your CV and see how you score against CCDS and every other live job. It's free.
Get my free matchesAED 18k–29k a month· est.