Cybersecurity GRC Specialist: Audit-Ready Policy & Risk Lead

sifiapp; Riyadh; On-site; SAR 120,000 - 190,000; Full time

Job summary

SiFi, a fast-growing B2B FinTech in Riyadh, seeks a Cybersecurity GRC Specialist to oversee regulatory compliance, policy governance, and risk management. You will drive evidence management, audit readiness, and KPI/KRI reporting across frameworks.

Responsibilities include maintaining SAMA CSF, PDPL/NDMO, and PCI-DSS compliance, mapping policies to controls, and supporting risk reviews with the risk and compliance teams. English and Arabic fluency is required.

Qualifications

• 1-3 years of experience in a dedicated Cybersecurity GRC role.
• Hands-on with SAMA CSF compliance in regulated entities.
• Experience in audit evidence preparation and regulatory assessments.
• Strong background in drafting cybersecurity policies and procedures.
• Experience using GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust).
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Fluency in English and Arabic.

Responsibilities

• Maintain compliance tracker across SAMA CSF, PDPL/NDMO, and PCI-DSS.
• Own evidence lifecycle: collection, validation, and documentation.
• Map policies and procedures to SAMA CSF controls and governance.
• Maintain cybersecurity risk register and conduct TPRA/vendor due diligence.
• Support risk reviews and reporting cycles with Risk and Compliance teams.
• Prepare KPI/KRI reports and track remediation actions.

Skills

GRC

Regulatory compliance

Audit readiness

SAMA CSF

PCI-DSS

Policy drafting

GRC platforms

English

Arabic

Education

Bachelor's degree in Cybersecurity

ISO 27001 Lead Implementer/Lead Auditor

CISA/CRISC

Tools

Archer

ServiceNow GRC

OneTrust

Job description

SiFi, a fast-growing B2B FinTech in Riyadh, seeks a Cybersecurity GRC Specialist to oversee regulatory compliance, policy governance, and risk management. You will drive evidence management, audit readiness, and KPI/KRI reporting across frameworks.

Responsibilities include maintaining SAMA CSF, PDPL/NDMO, and PCI-DSS compliance, mapping policies to controls, and supporting risk reviews with the risk and compliance teams. English and Arabic fluency is required.