Role Summary

We are seeking a Senior Cybersecurity GRC Specialist to lead and strengthen our cybersecurity governance, risk, and compliance framework. The role ensures that cybersecurity policies, controls, and operational practices comply with National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC), industry standards, and internal regulatory requirements.

The position has a strong focus on Cybersecurity Compliance and Business Continuity Management (BCM), ensuring the organization maintains resilient cybersecurity operations, effective disaster recovery capabilities, and regulatory alignment across business and technology environments.

Key Responsibilities

Cybersecurity Governance

Support development and maintenance of cybersecurity policies, standards, procedures, and guidelines.
Ensure governance practices align with organizational risk management frameworks.
Assist in maintaining the organization's cybersecurity governance framework.
Provide guidance to IT and business teams regarding cybersecurity policy requirements.

Cybersecurity Compliance & Regulatory Alignment

Support compliance with NCA Essential Cybersecurity Controls (ECC), ISO 27001, and NIST Cybersecurity Framework.
Conduct cybersecurity compliance assessments and gap analyses.
Monitor regulatory updates and support implementation of required controls.
Support preparation of documentation for regulatory and compliance reviews.

Cybersecurity Risk Management

Assist in identifying and assessing cybersecurity risks across the organization.
Maintain the organization's cyber risk register.
Participate in risk assessments for new technologies, projects, and systems.
Track implementation of risk mitigation and treatment plans.

Business Continuity & Disaster Recovery (BCM)

Support development and maintenance of cybersecurity-related business continuity and disaster recovery plans.
Coordinate Business Impact Analysis (BIA) activities with business units.
Ensure cybersecurity resilience capabilities support organizational business continuity requirements.
Assist in organizing BCP and DR testing exercises.
Document lessons learned and recommend improvements to BCM processes.

Cybersecurity Audits & Control Assurance

Support internal and external cybersecurity audits and regulatory assessments.
Conduct reviews of cybersecurity controls to assess effectiveness.
Track remediation of audit findings and compliance gaps.
Provide periodic reporting on compliance status.

Third-Party Cybersecurity Risk Management

Assist in evaluating cybersecurity risks associated with vendors and service providers.
Conduct vendor cybersecurity assessments and due diligence reviews.
Ensure vendors comply with organizational cybersecurity requirements.

Qualifications & Experience

Bachelor's degree inCybersecurity, Information Security, Computer Science, or a related field.
Minimum 5+ years of experience in Cybersecurity GRC, Risk, or Compliance roles.
Strong knowledge of KSA cybersecurity regulations (NCA, CST, SAMA).
Hands-on experience with cybersecurity audits, risk assessments, and compliance management.
Experience in business continuity and disaster recovery planning is highly desirable.
Relevant certifications (e.g., CISA, CRISC, CISSP, ISO 27001, NCA-related certifications) are an advantage.

Technical Competencies

Cybersecurity governance frameworks
Cyber risk management methodologies
Business Continuity Management (BCM)
Disaster Recovery (DR) planning
NCA Essential Cybersecurity Controls (ECC)
ISO 27001 and related standards
Third-party cybersecurity risk management
Cybersecurity control frameworks