Cybersecurity GRC Specialist

About the role

We are looking for a Cybersecurity GRC Specialist to support and manage governance, risk and compliance activities across the organisation. The role will ensure continuous adherence to industry standards and regulatory requirements while driving security awareness and governance initiatives.

Key responsibilities

• Execute cybersecurity compliance activities to maintain PCI DSS, ISO 27001, and other regulatory requirements.
• Perform cyber risk assessments, document findings and track remediation until closure.
• Develop, review and maintain security policies, standards, procedures and governance documentation.
• Coordinate security assessments and ensure timely remediation of identified gaps.
• Provide security support to business units, including access governance, information asset register maintenance and ad‑hoc security requests.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• 2–3 years of experience in cybersecurity GRC, risk assessments, compliance audits and governance.
• Experience in the financial or FinTech sector is preferred.
• Relevant certifications such as ISO 27001, Security+ or equivalent are a plus.

Required skills

• Strong knowledge of cybersecurity GRC frameworks and risk management.
• Familiarity with SAMA CSF, PCI DSS, ISO 27001 and NCA ECC.
• Experience with vulnerability management and security testing.