Cyber GRC Strategist - Oil & Gas

Client of Eram Talent; Medina; Presencial; SAR 279.000 - 446.000; Jornada completa

Descripción de la vacante

Client of Eram Talent is seeking a cybersecurity governance, risk and compliance (GRC) specialist to support development and continuous improvement of the organization's GRC framework. You will conduct risk assessments, develop and maintain policies, and monitor compliance across IT, OT, and regulatory requirements.

The role requires hands-on experience in risk assessments, audits, policy development, and awareness programs, with strong knowledge of Saudi NCA and HCIS requirements and experience

Formación

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or Information Technology; 5–6 years in Cybersecurity GRC, IT GRC, or Information Security.
• Experience in Oil & Gas, Petrochemical, Power Generation, or related industrial projects.
• Strong knowledge of Saudi NCA and HCIS cybersecurity requirements.

Responsabilidades

• Develop, review, and maintain cybersecurity policies, procedures, and standards.
• Conduct cybersecurity risk assessments, compliance audits, and identify security gaps.
• Maintain cybersecurity risk registers and monitor mitigation actions.
• Perform third‑party and vendor cybersecurity risk assessments.
• Ensure compliance with Saudi NCA and HCIS requirements.
• Support cybersecurity awareness programs, phishing simulations, and incident response activities.
• Monitor IT/OT security controls and prepare compliance reports and KPIs.

Conocimientos

Cybersecurity

GRC

Policy development

Compliance management

Vendor risk assessments

Educación

Bachelor's degree in Cybersecurity/Information Security/Computer Science/IT

Descripción del empleo

Client of Eram Talent is seeking a cybersecurity governance, risk and compliance (GRC) specialist to support development and continuous improvement of the organization's GRC framework. You will conduct risk assessments, develop and maintain policies, and monitor compliance across IT, OT, and regulatory requirements.

The role requires hands-on experience in risk assessments, audits, policy development, and awareness programs, with strong knowledge of Saudi NCA and HCIS requirements and experience