Cybersecurity GRC Specialist

Location: Riyadh, Saudi Arabia - Remote on the first few weeks then will transition to onsite once office is built

Contract Duration: Initial 6 months extendable contract

Employment Setup: Independent Contractor

• Open only for Saudi Nationals

We are seeking a Cybersecurity Governance, Risk & Compliance (GRC) Specialist to support and strengthen our information security governance, risk management, compliance, and assurance programs. The ideal candidate will have hands-on experience in cybersecurity policy development, security risk assessments, compliance management, and ISO-based audits and certifications.

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, standards, procedures, and governance frameworks.
• Conduct information security risk assessments and support enterprise cybersecurity risk management initiatives.
• Ensure compliance with cybersecurity regulations, frameworks, and industry best practices.
• Support security assurance activities, control assessments, and compliance reviews.
• Lead and coordinate ISO 27001 audits, assessments, and certification activities.
• Identify security control gaps and drive remediation plans with relevant stakeholders.
• Monitor compliance against cybersecurity frameworks and standards.
• Prepare governance, risk, and compliance reports for leadership and regulatory requirements.
• Work closely with IT, security, and business teams to improve the organization's security posture.

Required Qualifications

• 1-2+ years of experience in Cybersecurity GRC, Information Security, Risk Management, or Compliance.
• Strong experience writing and maintaining security policies, standards, and procedures.
• Hands-on experience with cybersecurity risk assessments and risk registers.
• Experience supporting assurance, audit, and compliance activities.
• Proven experience with ISO 27001 audits and Information Security Management Systems (ISMS).
• Strong understanding of security controls, governance frameworks, and regulatory compliance requirements.
• Excellent stakeholder management and communication skills.