GRC Cyber security (2373)

Since 2004, 2P – Perfect Presentation has been a leader in Saudi Arabia’s ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise. We are looking for an experienced Cybersecurity GRC Specialist with strong hands-on experience in Cybersecurity Governance, Risk Management, Compliance, Business Continuity, and Security Awareness. Key Responsibilities • Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks. • Define and monitor cybersecurity KPIs and governance performance indicators. • Conduct cybersecurity risk assessments and maintain organizational risk registers. • Develop and follow up on risk treatment plans and mitigation actions. • Assess cybersecurity compliance against applicable regulatory and industry requirements. • Support compliance with frameworks and standards including: • NCA ECC • NCA DCC • NCA CCC • NCA TCC • CST CRF • ISO/IEC 27001 • Conduct compliance assessments, identify gaps, and support remediation plans. • Support Business Impact Analysis (BIA) activities. • Develop, maintain, and test Business Continuity Plans (BCP). • Participate in periodic BCP testing and continuity exercises. • Develop and execute cybersecurity awareness campaigns. • Coordinate and conduct phishing simulation exercises. • Prepare cybersecurity governance, risk, compliance, and awareness reports for management. • Coordinate with IT, infrastructure, business, risk, compliance, and other relevant stakeholders. Requirements • Bachelor’s degree in Cybersecurity, Information Technology, or a related field. • 3–5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions. • Strong experience in Cybersecurity Governance, including policies, procedures, standards, strategies, and KPI development. • Hands-on experience in Cybersecurity Risk Management, including risk assessments, risk registers, and risk treatment. • Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements. • Familiarity with ISO/IEC 27001 and cybersecurity compliance practices. • Experience in Business Continuity, BIA, BCP development, and BCP testing. • Experience in cybersecurity awareness programs and phishing simulations. • Arabic speaker. • Strong analytical, documentation, communication, and stakeholder-management skills. Preferred Certifications • CompTIA Security+ • CISA – Certified Information Systems Auditor • CRISC – Certified in Risk and Information Systems Control • CISM – Certified Information Security Manager • CISSP – Certified Information Systems Security Professional Show more Show less

Bachelor’s degree in Cybersecurity, Information Technology, or a related field. 3–5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions. Strong experience in Cybersecurity Governance, including policies, procedures, standards, strategies, and KPI development. Hands-on experience in Cybersecurity Risk Management, including risk assessments, risk registers, and risk treatment. Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements. Familiarity with ISO/IEC 27001 and cybersecurity compliance practices. Experience in Business Continuity, BIA, BCP development, and BCP testing. Experience in cybersecurity awareness programs and phishing simulations. Arabic speaker.

Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks. Define and monitor cybersecurity KPIs and governance performance indicators. Conduct cybersecurity risk assessments and maintain organizational risk registers. Develop and follow up on risk treatment plans and mitigation actions. Assess cybersecurity compliance against applicable regulatory and industry requirements. Support compliance with frameworks and standards including NCA ECC, NCA DCC, NCA CCC, NCA TCC, CST CRF, ISO/IEC 27001. Conduct compliance assessments, identify gaps, and support remediation plans. Support Business Impact Analysis (BIA) activities. Develop, maintain, and test Business Continuity Plans (BCP). Participate in periodic BCP testing and continuity exercises. Develop and execute cybersecurity awareness campaigns. Coordinate and conduct phishing simulation exercises. Prepare cybersecurity governance, risk, compliance, and awareness reports for management. Coordinate with IT, infrastructure, business, risk, compliance, and other relevant stakeholders.