Cyber Security GRC Specialist is responsible for the security of an organization's information systems and networks. The role holder will implement security measures that effectively safeguard sensitive data in the event of a cyber attack while assisting in managing Cybersecurity GRC processes and ensuring compliance with regulations.
Key Responsibilities:
- Assist Cybersecurity compliance audits and regulatory reporting (GRC) processes and ensuring compliance with regulations (e.g., NCA ECC, SDAIA PDPL).
- Ensure continuous monitoring, protection and response to security events and alerts from Firewalls, EDR, and SIEM.
- Conduct risk assessments and recommend mitigation strategies.
- Identifying vulnerabilities in network & Information Systems.
- Collaborate on security policy development and enforcement.
- Document security breaches and assessing their damage.
- Stay updated on emerging cybersecurity trends and threats.
Requirements:
- Bachelor of Science degree, Information Security major, Computer Science or related fields.
- Professional information security certification, CompTIA Security+ is required or other equivalent certificates.
- Minimum 2-3 years of experience in cybersecurity with a mix of GRC and technical ops.
- Hands-on experience with SIEM tools (e.g., ClearSkies, Splunk, QRadar).
- Strong knowledge of risk management and Cybersecurity compliance standards.
- Excellent problem-solving and analytical skills.