Security Compliance Officer

About DXC DXC helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures and ensuring security and scalability across public, private and hybrid clouds. The world’s largest companies and public sector organizations trust DXC to deploy services to drive new levels of performance, competitiveness, and customer experience across their IT estates. Our more than 125,000 people in 70-plus countries are entrusted by our customers to deliver transformative technologies to ensure the success, safety and well-being of businesses and people around the world. By combining strengths and expertise globally, we create solutions and deliver greater outcomes for customers across their entire IT estate. Learn more about how we deliver excellence for our customers and colleagues at dxc.com. About the Role The Security Compliance Officer serves as the single point of accountability for regulatory cybersecurity compliance across DXC's Saudi-banking engagement. In this role, you will interpret, implement, and evidence adherence to the SAMA Cybersecurity Framework, NCA Essential Cybersecurity Controls (ECC), ISO 27001, and NIST CSF, ensuring the organization's security posture meets the rigorous standards required within the financial sector. Leveraging ServiceNow GRC and other compliance tooling, you will maintain a live control-matrix, coordinate internal and external audits, track remediation activities, and brief executive stakeholders on compliance posture and risk. This position requires close collaboration across regulation monitoring, control ownership, audit management, risk reporting, policy governance, and cross-functional liaison with delivery, SOC, and engineering teams to embed compliance into every stage of the project and solution lifecycle. Essential Job Functions • Track all updates to SAMA CSF, SAMA Operating Regulations, and NCA ECC, and translate requirements into actionable technical and process controls across security domains (Edge, Network, IAM/PAM, Data/Endpoint, DR, SOC) • Maintain a detailed control catalogue in ServiceNow GRC, including control IDs, owners, evidence artefacts, and test frequency • Map international frameworks (ISO 27001, NIST CSF) to Saudi regulations to enable unified reporting • Plan and lead internal readiness reviews, tabletop tests, and gap-assessments • Coordinate external regulator and third-party audits, ensuring timely evidence submission and walkthroughs • Log audit findings, agree action plans, track due-dates, and validate closure of remediation items • Produce monthly compliance dashboards, including heat-maps, KRIs, and trends, for the CISO, DXC PMO, and client executives • Draft and refresh security policies, standards, and SOPs triggered by regulatory change • Deliver awareness sessions to engineers and business units on their control obligations • Collaborate with the Delivery Lead, SOC, and engineering towers to embed compliance checkpoints into change, incident, and project lifecycles, ensuring new solutions include control design, testing, and evidence plans from the outset Basic Qualifications • Bachelor's degree in Information Security, Cybersecurity, Risk Management or related field • 5–7 years hands-on experience managing SAMA and/or NCA ECC compliance within a Saudi financial institution or Big-4 consulting project • Proven track-record running end-to-end audit cycles (planning, evidence, regulator Q&A, remediation) • Operational familiarity with a GRC platform (ServiceNow, Archer, or equivalent) for control mapping and workflow • Strong English documentation skills; professional Arabic proficiency preferred Other Qualifications • CRISC, CISA, ISO 27001 Lead Auditor/Implementer, CISSP, or CGEIT • Working knowledge of ISO 27001 clause/Annex-A mapping and NIST CSF tiers • Data-analytics/reporting skills (e.g., Power BI) to visualize compliance metrics • Experience coaching technical teams and presenting to Board-level committees