Cybersecurity GRC Specialist - Policy, Risk & Compliance

CCDS; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

CCDS is seeking a seasoned cybersecurity governance, risk and compliance professional to support a government entity in Riyadh. The role focuses on policy governance, risk assessments, and audit readiness, with reporting to executives and committees.

You will maintain the risk register, coordinate remediation, and ensure compliance with NCA and ISO/IEC 27001 standards, including third-party risk and eGRC tooling support.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• At least 6 years of experience in cybersecurity governance, risk, and compliance.
• Advanced knowledge of Saudi and international cybersecurity frameworks and standards, including NCA controls and ISO/IEC 27001.
• Proven experience with cybersecurity risk registers, treatment plans, third-party risk, executive reporting, and eGRC tools.

Responsibilities

• Review and periodically update cybersecurity policies, procedures, standards, and guidelines
• Perform cybersecurity risk assessments covering assets, systems, projects, and third parties
• Maintain the cybersecurity risk register, develop treatment plans, track actions, and align decisions with the entity's approved risk appetite
• Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other applicable national or international frameworks
• Support internal and external audits, prepare evidence, manage non-compliance cases, and follow remediation through closure
• Operate or support eGRC and cybersecurity risk-management tools
• Prepare management reports, executive dashboards, KPIs, compliance status reports, and committee-level presentations

Skills

Cybersecurity governance

Risk assessment

Compliance management

Executive reporting

Stakeholder management

Education

Bachelor’s degree in Computer Science or Information Security

Tools

eGRC tools

Job description

CCDS is seeking a seasoned cybersecurity governance, risk and compliance professional to support a government entity in Riyadh. The role focuses on policy governance, risk assessments, and audit readiness, with reporting to executives and committees.

You will maintain the risk register, coordinate remediation, and ensure compliance with NCA and ISO/IEC 27001 standards, including third-party risk and eGRC tooling support.