Job Description

Cybersecurity Compliance Officer

DXC Technology | Riyadh, Saudi Arabia | On-site

Role Summary

DXC Technology is seeking a Cybersecurity Compliance Officer to manage security controls, audit readiness, and regulatory compliance for a confidential engagement. You will maintain control records and evidence, coordinate assessments, track remediation, and report compliance risks to senior stakeholders.

Key Responsibilities

Controls and Governance

Translate applicable cybersecurity requirements into practical technical and process controls.
Maintain a control register with owners, evidence requirements, and review schedules.
Map controls to relevant frameworks, including the NCA Essential Cybersecurity Controls, ISO 27001, and NIST CSF.
Review security policies and procedures when requirements change.

Audits and Remediation

Coordinate internal assessments and external audits, including evidence collection and control walkthroughs.
Record findings, agree corrective actions with control owners, and track them through closure.
Work with security, infrastructure, and delivery teams to include compliance checks in operational processes and new solutions.

Reporting

Prepare compliance dashboards, risk summaries, and remediation updates for senior stakeholders.
Help technical teams understand their control ownership and evidence obligations.

Required Experience and Qualifications

Bachelor's degree in Cybersecurity, Information Security, Risk Management, or a related field.
7+ years of experience in cybersecurity compliance or governance.
Hands-on experience with NCA Essential Cybersecurity Controls and security control assessments.
Experience coordinating audits, managing evidence, and tracking remediation.
Experience using a GRC platform such as ServiceNow GRC, RSA Archer, or an equivalent tool.
Strong English communication and documentation skills.

Preferred Experience

Professional Arabic proficiency.
CISA, CRISC, CISSP, CGEIT, or ISO 27001 Lead Auditor or Implementer certification.
Experience mapping controls to ISO 27001 or NIST CSF.
Experience preparing compliance reports for senior stakeholders.