Cyber Security Specialist / Lead

The company is seeking a Cyber Security specialist / lead to join our Cyber Security team. In this role, you will own the day-to-day governance, risk, and compliance operations that underpin the company's cyber security program, ensuring the organization meets regulatory expectations, maintains a mature control environment, and continuously improves its security posture.

Location
Riyadh

Your Responsibilities

• Support in SAMA inspection readiness (end-to-end), including compliance assessments, evidence coordination, gap analysis, and direct support during on-site regulatory visits.
• Lead compliance assessment and alignment activities across applicable regulatory frameworks, including SAMA CSF, NCA, PCI-DSS, and PDPL, ensuring timely closure of identified gaps and observations.
• Drive the governance lifecycle for cyber security policies, standards, and procedures including development, periodic review, version control, stakeholder approval, and communication to the company's employees.
• Maintain and manage compliance mappings, control inventories, and maturity tracking across all in-scope frameworks, ensuring accuracy and audit-readiness at all times.
• Follow up with first-line teams (Technology, Engineering, IT Ops) and relevant business stakeholders to ensure timely implementation and remediation of compliance requirements and control gaps.
• Coordinate and respond to regulatory initiatives, requests, and ad-hoc inquiries from regulators such as SAMA, NCA, and relevant payment scheme bodies.
• Prepare and present cyber security governance, compliance status, and maturity updates for the Cyber Security Committee and other internal governance forums.
• Produce GRC-related dashboards, metrics, and KPI reporting for leadership visibility on compliance posture, policy health, and remediation progress.
• Collaborate with Enterprise Risk and Compliance teams on cross-functional risk and compliance matters, including contributing to vendor risk assessment reviews from a cyber security perspective.
• Utilize and maintain the company's GRC platform to manage compliance workflows, control assessments, policy repositories, and audit evidence.
• Support audit activities by coordinating evidence collection, tracking findings, and following up on remediation and mitigation actions to closure.
• Stay current on regulatory updates, emerging cyber security risks, and industry best practices relevant to fintech and financial services in the GCC region.

Your Expertise

• 4–6 years of experience in Cyber Security GRC, Technology Risk, IT Governance, IT Audit, or a related field within financial services, fintech, or banking.
• Demonstrated experience with regulatory compliance frameworks, particularly SAMA CSF (required) and NCA (preferred). Experience with PCI-DSS and/or PDPL is a strong advantage.
• Solid understanding of cyber security governance principles, policy lifecycle management, and control assessment methodologies.
• Experience conducting or supporting regulatory inspections, compliance assessments, and maturity evaluations.
• Proven ability to manage compliance remediation programs, track findings to closure, and coordinate across multiple stakeholders.
• Strong documentation and reporting skills, with the ability to produce clear, structured deliverables for both technical and executive audiences.
• Experience working with GRC platforms and tools for compliance management, policy governance, and audit tracking are a plus.