GRC Expert (Saudi National)

We are seeking a highly skilled GRC Specialist to support the Governance, Risk & Compliance (GRC) initiatives for one of the company's key clients in Riyadh. The selected candidate will play a critical role in strengthening the organization’s ISO 27001:2022 Information Security Management System (ISMS), ensuring ongoing compliance, maintaining documentation, and supporting audit readiness.

Key Responsibilities:

• ISO 27001 Governance & Compliance:

  • Develop, review, and update ISMS policies, procedures, standards, and governance documentation.
  • Ensure alignment of all documentation and processes with ISO 27001:2022 controls and best practices.
  • Drive continuous improvement across ISMS implementations.

• Risk Management:

  • Conduct and support periodic risk assessments, update risk registers, and maintain security-related documentation.
  • Manage ISMS records, logs, and evidence repositories to support control validation.

• Audit Preparedness:

  • Lead and support the organization in internal and external ISO 27001 audits.
  • Coordinate with internal teams, external auditors, and stakeholders to provide required evidence and responses.
  • Ensure full compliance with ISO control requirements.

• Reporting & Governance:

  • Prepare professional governance materials including reports, dashboards, audit summaries, board-level presentations, and compliance tracking sheets.
  • Provide continuous visibility to leadership on ISMS performance and risks.

• Technical Advisory:

  • Provide technical input and guidance on firewall and network security solutions, WAF, load balancers, and SIEM technologies.
  • Collaborate with technical teams to validate controls, review configurations, and ensure security compliance.

Candidate Requirements:

• Experience:

  • Minimum 8+ years of experience in Cybersecurity, GRC, and ISMS implementations.
  • Demonstrated expertise in implementing, managing, and maintaining ISO 27001 frameworks.
  • Strong background in security documentation, governance activities, and audit support.

• Technical Competencies:

  • Solid understanding of firewalls, WAF, SIEM platforms, and network security components.
  • Hands-on experience with Windows & Linux server environments.
  • Knowledge of cloud security principles across major cloud providers (Azure/AWS/GCP).
  • Basic programming/scripting skills in Python, PHP, and JavaScript.

Location: Riyadh, Saudi Arabia (On-site) Work Conditions: Full-time