Cybersecurity GRC Lead: Policy, Risk & Audit Excellence

Confidential; Al Khobar; On-site; SAR 220,000 - 320,000; Full time

Job summary

Confidential is seeking a cybersecurity compliance professional to develop and maintain policies, procedures, and control documentation. You will drive awareness programs, training, and phishing simulations while aligning governance with standards and legal obligations.

With 6–10 years in cyber risk, audit, or GRC, you will implement ISMS and lead third-party risk assessments and auditable controls across departments in Saudi Arabia.

Qualifications

• Bachelor's degree or equivalent in security, governance, law, or business with security focus.
• Experience in cybersecurity compliance, audit, or GRC (6–10 years).
• Experience implementing and managing ISMS and compliance frameworks.

Responsibilities

• Develop and maintain cybersecurity policies, procedures, and control documentation.
• Drive cybersecurity awareness, phishing and training initiatives.

Skills

Cybersecurity compliance

Audit

GRC

ISMS

Education

Bachelor’s degree in information security, IT Governance, Law, or Business with Security specialization

Job description

Confidential is seeking a cybersecurity compliance professional to develop and maintain policies, procedures, and control documentation. You will drive awareness programs, training, and phishing simulations while aligning governance with standards and legal obligations.

With 6–10 years in cyber risk, audit, or GRC, you will implement ISMS and lead third-party risk assessments and auditable controls across departments in Saudi Arabia.