Cybersecurity Risk and Compliance Specialist

About the Role
We are seeking a talented professional to join our team, primarily focusing on Level 2 (L2) and Level 3 (L3) Cybersecurity consulting roles. The successful candidate will be a Saudi National, equipped with a solid educational background and extensive professional experience in Cybersecurity Governance, Risk, and Compliance (GRC).

Responsibilities

• Deliver consulting services to clients on Cybersecurity GRC.
• Implement practical solutions based on Saudi national cybersecurity frameworks and regulations.
• Collaborate effectively with various stakeholders, including SITE teams, to articulate complex cybersecurity concepts.
• Maintain high standards of professionalism and confidentiality while handling sensitive situations.
• Stay updated on the latest developments in cybersecurity standards and guidelines to ensure compliance.

Requirements

• Nationality Requirement: Must be a Saudi National
• Educational Background:
  • Bachelor's degree or higher in one of the following fields:
    • Cybersecurity
    • Information Systems
    • Computer Science
    • Computer Engineering
    • Related field
• Professional Experience:
  • Minimum 4+ years of experience in Cybersecurity Governance, Risk, and Compliance (GRC).
  • Preference for candidates with:
    • L2 Consultants: 5-8 years of experience
    • L3 Consultants: 9-12 years of experience
• Knowledge of Cybersecurity Standards:
  • Strong practical experience with Saudi national cybersecurity frameworks and regulations including, but not limited to:
    • NCA Essential Cybersecurity Controls (ECC)
    • CSCC, DCC, CCC, OTCC
    • National Cybersecurity Strategy (NCS)
    • National Data Management Office (NDMO)
    • Personal Data Protection Law (PDPL)
  • Good working knowledge of international frameworks and standards such as:
    • ISO/IEC 27001
    • NIST
    • CIS Controls
    • PCI DSS
    • GDPR
• Certifications:
  • One or more relevant certifications preferred, including:
    • ISO/IEC 27001 Lead Auditor / Lead Implementer
    • GCCC
    • CISSP
    • CISM
    • CISA
  • Candidates actively pursuing certifications are also welcome.
• Communication & Professional Conduct:
  • Strong communication skills to articulate cybersecurity concepts to diverse stakeholders.
  • Proven ability to collaborate effectively within a multi stakeholder environment.
  • High standards of professionalism, customer engagement, and discretion.