Cybersecurity GRC Specialist

flint-international; Jeddah; On-site; SAR 180,000 - 300,000; Full time

Job summary

Flint International is seeking a Security & GRC professional in Jeddah to lead the development and maintenance of cybersecurity policies, risk assessments, and regulatory compliance programs.

You will manage the risk register, support audits, monitor changes in standards (ISO 27001, NIST, GDPR), and collaborate on reports and awareness training to strengthen governance across the organization.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Risk management, or related field.
• 3–5 years of experience in Cybersecurity, GRC, or IT audit roles.
• Experience with ISO 27001, NIST and other GRC frameworks.
• Exposure to regulated industries is a plus.
• Strong cybersecurity controls, risk assessment, and compliance knowledge.
• Strong analytical and documentation skills.

Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, and standards.
• Conduct risk assessments and third-party/vendor risk reviews.
• Ensure regulatory framework compliance (ISO 27001, NIST, GDPR, PCI-DSS, HIPAA).
• Manage risk register and track mitigation plans.
• Support audits by collecting evidence and ensuring corrective actions.
• Monitor regulatory/industry changes and update policies.
• Assist in security awareness training.
• Collaborate on reports and dashboards for leadership.
• Use GRC tools to automate and manage compliance workflows.

Skills

Cybersecurity knowledge

GRC

Documentation skills

Analytical thinking

Education

Bachelor’s degree in Cybersecurity, Information Technology, Risk management, or related field

Tools

GRC tools

Job description

Location: Jeddah, KSA
Notice Period: Only Immediate joiners OR not longer than 30 days’ Notice Period.

Job Description

• Develop, review, and maintain cybersecurity policies, procedures, and standards.
• Conduct risk assessments and third-party/vendor risk reviews.
• Ensure compliance with applicable regulatory frameworks (e.g., ISO 27002, NIST, GDPR, PCI-DSS, HIPAA).
• Manage the risk register and track mitigation plans for identified security risks.
• Support internal and external audits by collecting evidence, addressing findings, and ensuring corrective actions are implemented.
• Monitor regulatory and industry changes and ensure updates are reflected in policies and controls.
• Assist in developing and delivering security awareness training across the organization.
• Collaborate on reports and dashboards on compliance status, risk levels, and audit outcomes for leadership.
• Use GRC tools or platforms to automate, track, and manage compliance and risk workflows.

Qualifications

Educational: Bachelor’s degree in Cybersecurity, Information Technology, Risk management, or related field.

Years Of Experience

3-5 years of experience in Cybersecurity, GRC, or IT audit roles.

Nature of Experience

• Experience with frameworks (e.g., ISO 27001, NIST) and GRC tools
• Exposure to regulated industries is a plus

Skills

• Strong understanding of cybersecurity controls, risk assessment, and compliance practices.
• Strong analytical and documentation skills.