About the Role
This position is focused on enhancing and maintaining the Cybersecurity Governance, Risk, and Compliance (GRC) framework of the organization. It encompasses conducting cybersecurity risk assessments, developing and reviewing policies and procedures, ensuring compliance with regulatory requirements and industry standards, and driving security awareness initiatives. The objective is to secure the organization's IT, Information Systems (IS), and Operational Technology (OT) environments while promoting a culture of cybersecurity awareness.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Responsibilities
- Develop, review, and maintain cybersecurity policies, procedures, and standards.
- Conduct cybersecurity risk assessments and compliance audits, identifying security gaps.
- Maintain cybersecurity risk registers and monitor mitigation actions.
- Perform third-party and vendor cybersecurity risk assessments.
- Ensure compliance with Saudi NCA and HCIS cybersecurity requirements.
- Support cybersecurity awareness programs, phishing simulations, and incident response activities.
- Monitor IT/OT security controls and prepare compliance reports and KPIs.
Mandatory Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or Information Technology.
- 5–6 years of experience in Cybersecurity GRC, IT GRC, or Information Security.
- Experience in Oil & Gas, Petrochemical, Power Generation, or related industrial projects.
- Strong knowledge of Saudi NCA and HCIS cybersecurity requirements.
- Hands-on experience in cybersecurity risk assessments, audits, policy development, and compliance management.
- Good understanding of IT and OT cybersecurity environments.
Preferred Certifications
- CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor, Security+, or CEH.
