Cybersecurity GRC Specialist — Policy & Risk

flint-international; Jeddah; On-site; SAR 180,000 - 300,000; Full time

Job summary

Flint International is seeking a Security & GRC professional in Jeddah to lead the development and maintenance of cybersecurity policies, risk assessments, and regulatory compliance programs.

You will manage the risk register, support audits, monitor changes in standards (ISO 27001, NIST, GDPR), and collaborate on reports and awareness training to strengthen governance across the organization.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Risk management, or related field.
• 3–5 years of experience in Cybersecurity, GRC, or IT audit roles.
• Experience with ISO 27001, NIST and other GRC frameworks.
• Exposure to regulated industries is a plus.
• Strong cybersecurity controls, risk assessment, and compliance knowledge.
• Strong analytical and documentation skills.

Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, and standards.
• Conduct risk assessments and third-party/vendor risk reviews.
• Ensure regulatory framework compliance (ISO 27001, NIST, GDPR, PCI-DSS, HIPAA).
• Manage risk register and track mitigation plans.
• Support audits by collecting evidence and ensuring corrective actions.
• Monitor regulatory/industry changes and update policies.
• Assist in security awareness training.
• Collaborate on reports and dashboards for leadership.
• Use GRC tools to automate and manage compliance workflows.

Skills

Cybersecurity knowledge

GRC

Documentation skills

Analytical thinking

Education

Bachelor’s degree in Cybersecurity, Information Technology, Risk management, or related field

Tools

GRC tools

Job description

Flint International is seeking a Security & GRC professional in Jeddah to lead the development and maintenance of cybersecurity policies, risk assessments, and regulatory compliance programs.

You will manage the risk register, support audits, monitor changes in standards (ISO 27001, NIST, GDPR), and collaborate on reports and awareness training to strengthen governance across the organization.