Cybersecurity GRC Specialist Audit & Compliance (Saudi)

SiFi - Simplified Financial Solutions Company; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

SiFi is seeking a Cybersecurity GRC Specialist in Riyadh to manage regulatory compliance, evidence, and KPI/KRI reporting across frameworks such as SAMA CSF, PDPL/NDMO, and PCI-DSS.

You will own the GRC lifecycle, develop policies, map controls to SAMA CSF, maintain risk registers, and coordinate with risk and compliance teams to ensure audit readiness. This role is Saudi national only, based in Riyadh.

Qualifications

• 1–3 years of dedicated Cybersecurity GRC experience required.
• Hands-on experience with SAMA CSF compliance in regulated entities.
• Experience in audit evidence preparation and regulatory assessments.
• Strong background in drafting cybersecurity policies and procedures.
• Experience using GRC platforms (Archer, ServiceNow GRC, OneTrust, etc.).
• Bachelor’s degree in Cybersecurity or related field; professional certifications are a plus.

Responsibilities

• Maintain and manage regulatory compliance and audit readiness across frameworks (SAMA CSF, PDPL/NDMO, PCI-DSS).
• Own evidence lifecycle: collection, validation, documentation, and traceability.
• Develop and maintain cybersecurity policies, standards, and procedures; map to SAMA CSF controls.
• Maintain cybersecurity risk register and conduct third-party risk assessments (TPRA).
• Coordinate risk reviews and reporting with Risk and Compliance teams.

Skills

GRC experience

SAMA CSF

Audit evidence

Policy drafting

GRC platforms

English & Arabic

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Archer

ServiceNow GRC

OneTrust

Job description

SiFi is seeking a Cybersecurity GRC Specialist in Riyadh to manage regulatory compliance, evidence, and KPI/KRI reporting across frameworks such as SAMA CSF, PDPL/NDMO, and PCI-DSS.

You will own the GRC lifecycle, develop policies, map controls to SAMA CSF, maintain risk registers, and coordinate with risk and compliance teams to ensure audit readiness. This role is Saudi national only, based in Riyadh.