JobCubby JobCubby
Sign up
Eram Talent

Cybersecurity Governance & Compliance Specialist (Saudi Arabia)

Eram Talent Jizan, Jazan Province, Saudi Arabia

Staffing and Recruiting · 1,001-5,000 employees

2 d ago
security Senior (5-10 yrs) Full-time Saudi Arabia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves developing and maintaining cybersecurity GRC frameworks, policies, and procedures to ensure compliance with regulatory standards. It also includes conducting risk assessments, monitoring IT/OT security controls, and supporting security awareness initiatives.

What they look for

Cybersecurity Governance Risk Assessment Compliance Management Policy Development IT Security OT Security NCA Compliance HCIS Compliance Auditing Security Awareness Incident Response Vendor Risk Management Cybersecurity Frameworks Risk Registers KPI Reporting

Requirements

Candidates must hold a bachelor's degree in a relevant field and possess 5-6 years of experience in cybersecurity GRC or information security. Strong knowledge of Saudi NCA and HCIS requirements, along with experience in industrial sectors like Oil & Gas, is mandatory.

Full description

To support the development, implementation, and continuous improvement of the organization's Cybersecurity Governance, Risk, and Compliance (GRC) framework. The role involves conducting cybersecurity risk assessments, developing and maintaining policies and procedures, monitoring compliance, and implementing security awareness initiatives to ensure the organization's IT, Information Systems (IS), and Operational Technology (OT) environments remain secure and compliant with applicable regulatory requirements and industry standards.

Key Responsibilities• Develop, review, and maintain cybersecurity policies, procedures, and standards.

  • Conduct cybersecurity risk assessments, compliance audits, and identify security gaps.
  • Maintain cybersecurity risk registers and monitor mitigation actions.
  • Perform third-party and vendor cybersecurity risk assessments.
  • Ensure compliance with Saudi NCA and HCIS cybersecurity requirements.
  • Support cybersecurity awareness programs, phishing simulations, and incident response activities.
  • Monitor IT/OT security controls and prepare compliance reports and KPIs.

Mandatory Requirements• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or Information Technology.

  • 5–6 years of experience in Cybersecurity GRC, IT GRC, or Information Security.
  • Experience in Oil & Gas, Petrochemical, Power Generation, or related industrial projects.
  • Strong knowledge of Saudi NCA and HCIS cybersecurity requirements.
  • Hands-on experience in cybersecurity risk assessments, audits, policy development, and compliance management.
  • Good understanding of IT and OT cybersecurity environments.

Preferred CertificationsCISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor, Security+, or CEH.

Candidate Preferences

Similar roles