Cyber Security Governance, Risk and Compliance (GRC) Senior Specialist

Saudi Railway Company; Riyadh; On-site; SAR 120,000 - 180,000; Full time

Job summary

Saudi Railway Company is seeking a Cyber Security GRC Senior Specialist to join the Cyber Security department in Riyadh. This role focuses on supporting the organization’s GRC cybersecurity program, ensuring compliance with policies, standards, and regulatory requirements.

The Senior Specialist will develop and maintain cybersecurity policies and related documentation, assess controls, participate in audits, and coordinate with stakeholders to enhance the organization’s cybersecurity posture

Qualifications

• Bachelor’s degree in computer science, cyber security, computer engineering, or information technology.
• Minimum 5 years of relevant experience.

Responsibilities

• Provides general GRC cybersecurity support.
• Performs cybersecurity tasks and risk assessments.
• Identifies, assesses, and manages cybersecurity risks to protect information and technology assets.
• Develops, updates, and maintains cybersecurity policies and related documentation.
• Reviews existing and proposed policies with stakeholders and aligns them with strategy.
• Supports audits and prepares audit reports for authorized parties.
• Assists in evaluating cybersecurity aspects of contracts for regulatory compliance.
• Tracks compliance with applicable legislation, regulations, and accreditation standards.

Education

BSc in CS/Cyber Security/IT/Computer Eng.

Job description

We are looking for Cyber Security GRC Senior Specialist for our company!

Department: Cyber Security.

Job Purpose:

• Provides general GRC cybersecurity support.
• Perform cybersecurity tasks.
• Identifies, assesses, and manages an organization’s cybersecurity risks protecting its information and technology assets in line with organizational policies and procedures and related laws and regulations.
• Develop cybersecurity policies and related documentation.
• Review existing and proposed policies and related documentation with stakeholders.
• Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.
• Ensures an organization’s cybersecurity program complies with applicable requirements, policies, and standards.
• Develops, updates, and maintains cybersecurity policies to support and align with an organization’s cybersecurity requirements.
• Help analyzes cybersecurity controls and assesses their effectiveness.
• Participate in cybersecurity audits to assess an organization’s compliance with applicable requirements, policies, standards, and controls.
• Assist in preparing audit reports and communicating them to authorized parties.
• Help evaluate cybersecurity aspects of contracts to ensure compliance with regulatory requirements.
• Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.
• Support in reviewing cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.
• Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.
• Help in Developing the methods to effectively monitor and measure risk, compliance, and assurance efforts.
• Maintain knowledge of applicable cybersecurity defense policies, regulations, and compliance documents as they pertain to cybersecurity defense auditing.
• Provide support to compliance activities as necessary.
• Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance.
• Conduct Cybersecurity risk assessment on applications, new services, when obtaining third party services.
• NCA, ISO 27001

Qualifications:

• Bachelor’s degree in computer science, Cyber Security, Computer Engineering, Information Technology
• A minimum of 5 years of relevant experience