Cyber GRC Specialist: Audit-Ready Compliance & Policy

Sifi; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

SiFi in Saudi Arabia seeks a Cybersecurity GRC Specialist to maintain regulatory compliance posture and ensure audit readiness across frameworks. You will manage the full GRC lifecycle including evidence management, policy governance, risk tracking, and KPI/KRI reporting, ensuring controls are measurable and defensible.

Ideal candidates have 1-3 years in a GRC role, experience with SAMA CSF compliance, and strong policy drafting skills; proficiency with Archer, ServiceNow GRC, or OneTrust is

Qualifications

• 1-3 years of experience in a dedicated Cybersecurity GRC role.
• Hands-on experience with SAMA CSF compliance within regulated entities.
• Experience in audit evidence preparation and regulatory assessments.
• Strong background in drafting cybersecurity policies and procedures.

Responsibilities

• Regulatory Compliance & Audit Readiness: Manage compliance tracker across SAMA CSF, PDPL, NDMO, PCI-DSS and evidence lifecycle.
• Governance & Policy Management: Develop and maintain cybersecurity policies, standards and procedures; map to controls.
• Cyber Risk Management: Maintain risk register; conduct TPRA and vendor due diligence; support risk reviews.
• KPI & KRI Monitoring & Reporting: Collect and validate KPIs/KRIs; maintain centralized tracker; report trends.

Skills

English

Arabic

Policy drafting

Education

Bachelor's degree in Cybersecurity

Tools

Archer

ServiceNow GRC

OneTrust

Job description

SiFi in Saudi Arabia seeks a Cybersecurity GRC Specialist to maintain regulatory compliance posture and ensure audit readiness across frameworks. You will manage the full GRC lifecycle including evidence management, policy governance, risk tracking, and KPI/KRI reporting, ensuring controls are measurable and defensible.

Ideal candidates have 1-3 years in a GRC role, experience with SAMA CSF compliance, and strong policy drafting skills; proficiency with Archer, ServiceNow GRC, or OneTrust is