Confidential
Job Overview
A cybersecurity consultancy is seeking a Cybersecurity GRC Specialist to support governance, risk, and compliance work in Riyadh. The role suits a professional who understands how organizations identify security risks, document controls, and demonstrate compliance with regulatory and industry requirements. The successful candidate will contribute to assessments, policy development, reporting, and continuous improvement of cybersecurity practices.
This position combines analytical review with clear documentation and communication. The specialist will work with internal teams and, where required, client stakeholders to evaluate existing controls, identify gaps, and support practical recommendations. Familiarity with Saudi cybersecurity requirements is particularly important, alongside a working knowledge of recognized international frameworks.
Key Responsibilities
- Support cybersecurity governance, risk management, and compliance activities across assigned projects.
- Conduct cyber-risk assessments, control reviews, and compliance gap analyses.
- Prepare and maintain policies, procedures, registers, and governance documentation.
- Compile clear compliance reports and presentations for internal and client use.
- Check control alignment with relevant Saudi requirements and international standards.
- Help track identified risks, actions, and documentation updates through to completion.
Requirements and Qualifications
- Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field.
- At least two years of relevant GRC experience.
- Strong understanding of National Cybersecurity Authority controls and requirements.
- Familiarity with the Saudi Central Bank Cybersecurity Framework.
- Knowledge of ISO/IEC 27001, NIST, risk assessment, and gap analysis.
- Good spoken and written English, with strong reporting and communication abilities.
- Comfortable using Microsoft Excel and PowerPoint to organize and present findings.
Skills and Competencies
The role calls for careful analysis, structured thinking, accurate record keeping, and the ability to explain technical risks in clear language. A strong candidate can compare current practices against defined controls, prioritize gaps, and prepare reports that are practical for decision-makers. Attention to detail and responsible handling of confidential security information are essential.
Employment Details
Company: Confidential. Industry: Cybersecurity and corporate governance consultancy. Location: Riyadh, Saudi Arabia. This is a full-time position. Salary: SAR 8,000–12,000 per month (estimated). Experience: At least 2 years in cybersecurity governance, risk management, and compliance. Qualification: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
To apply for this job email your details to job@trusted.sa
Never pay anyone for a job application, interview, recruitment process, visa processing, or job offer. Legitimate employers and recruitment agencies should not ask candidates to make payments in exchange for employment.
- GCCRecruitments.com is a job information platform sharing employment opportunities across the GCC region.
- We make reasonable efforts to publish accurate and genuine job opportunities from companies and trusted sources.
- However, we cannot guarantee the authenticity, availability, or accuracy of every job posting, as some information comes from external sources.
- GCCRecruitments.com is not an employer or recruitment agency and does not participate in hiring, interviews, or candidate selection.
- We never charge job seekers any fees for applying to jobs listed on our website. Never send money to anyone claiming to represent us or an employer.
- Candidates should verify job details and employer information through official sources before sharing personal information or attending an interview.
- We are not responsible for fraud, financial loss, or misleading information involving employers, recruiters, or third parties.
- Found a suspicious listing? Report This Job so we can review it.