Cybersecurity Risk and Compliance Specialist

About the Role
We are seeking qualified candidates for positions focusing on Level 2 and Level 3 Cybersecurity Governance, Risk, and Compliance (GRC). The ideal candidates will be Saudi Nationals with a strong educational background and relevant professional experience.

Responsibilities

• Assist in implementing and managing GRC frameworks and processes.
• Ensure compliance with national cybersecurity frameworks and regulations.
• Collaborate with cross-functional teams to address cybersecurity risks and implement controls.
• Articulate complex cybersecurity concepts clearly to diverse stakeholders.
• Handle sensitive information with discretion and professionalism.

Requirements
Educational Background:

• Bachelor’s degree or higher in Cybersecurity, Information Systems, Computer Science, Computer Engineering, or a related field.

Professional Experience:

• Minimum 4+ years of experience in Cybersecurity GRC is required.
• Preference for:
  • L2 Consultants: 5-8 years of experience.
  • L3 Consultants: 9-12 years of experience.

Knowledge Requirements:

• Strong practical experience with Saudi national cybersecurity frameworks and regulations, including:
  • NCA Essential Cybersecurity Controls (ECC)
  • CSCC, DCC, CCC, OTCC
  • National Cybersecurity Strategy (NCS)
  • National Data Management Office (NDMO)
  • Personal Data Protection Law (PDPL)
• Good working knowledge of international frameworks and standards such as:
  • ISO/IEC 27001
  • NIST
  • CIS Controls
  • PCI DSS
  • GDPR

Certifications:

• One or more relevant certifications are preferred, including:
  • ISO/IEC 27001 Lead Auditor / Lead Implementer
  • GCCC
  • CISSP
  • CISM
  • CISA
• Candidates actively pursuing relevant certifications are also welcome.

Communication & Professional Conduct:

• Strong communication skills to articulate complex concepts effectively.
• Proven ability to collaborate within a multi-stakeholder environment (e.g., SITE teams).
• Maintain high standards of professionalism, customer engagement, and confidentiality.
• Ability to handle sensitive situations with discretion and diplomacy.