Cybersecurity GRC Specialist(Saudi National only)

SiFi - Simplified Financial Solutions Company; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

SiFi is seeking a Cybersecurity GRC Specialist in Riyadh to manage regulatory compliance, evidence, and KPI/KRI reporting across frameworks such as SAMA CSF, PDPL/NDMO, and PCI-DSS.

You will own the GRC lifecycle, develop policies, map controls to SAMA CSF, maintain risk registers, and coordinate with risk and compliance teams to ensure audit readiness. This role is Saudi national only, based in Riyadh.

Qualifications

• 1–3 years of dedicated Cybersecurity GRC experience required.
• Hands-on experience with SAMA CSF compliance in regulated entities.
• Experience in audit evidence preparation and regulatory assessments.
• Strong background in drafting cybersecurity policies and procedures.
• Experience using GRC platforms (Archer, ServiceNow GRC, OneTrust, etc.).
• Bachelor’s degree in Cybersecurity or related field; professional certifications are a plus.

Responsibilities

• Maintain and manage regulatory compliance and audit readiness across frameworks (SAMA CSF, PDPL/NDMO, PCI-DSS).
• Own evidence lifecycle: collection, validation, documentation, and traceability.
• Develop and maintain cybersecurity policies, standards, and procedures; map to SAMA CSF controls.
• Maintain cybersecurity risk register and conduct third-party risk assessments (TPRA).
• Coordinate risk reviews and reporting with Risk and Compliance teams.

Skills

GRC experience

SAMA CSF

Audit evidence

Policy drafting

GRC platforms

English & Arabic

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Archer

ServiceNow GRC

OneTrust

Job description

Cybersecurity GRC Specialist(Saudi National only)

Riyadh, Saudi Arabia | Posted on 08/14/2026

SiFi is a fast-growing B2B FinTech company specializing in spend management and card issuance solutions. We help companies take control of their spending, streamline expense workflows, and operate with greater efficiency. Role Overview

The Cybersecurity GRC Specialist plays a critical role in maintaining SiFi’s cybersecurity compliance posture and ensuring audit readiness across all regulatory frameworks.

This role is responsible for managing the full Governance , Risk, and Compliance (GRC) lifecycle — including evidence management, policy governance, risk tracking, and KPI/KRI reporting — ensuring that all cybersecurity controls are measurable, defensible, and aligned with regulatory expectations.

Key Responsibilities:

1. Regulatory Compliance & Audit Readiness

• Maintain and manage the compliance tracker across SAMA CSF, PDPL/NDMO, and PCI-DSS
• Own the full evidence lifecycle: collection, validation, and documentation
• Ensure continuous audit readiness with traceable, control-aligned evidence
• Track regulatory findings and remediation plans, ensuring timely closure
• Provide regular compliance status reports to the CISO and relevant committees

2. Governance & Policy Management

• Develop and maintain cybersecurity policies, standards, and procedures
• Ensure documentation aligns with SiFi governance structure and regulatory expectations
• Map all policies and procedures to SAMA CSF controls
• Maintain and update the cybersecurity risk register
• Conduct third-party risk assessments (TPRA) and vendor due diligence
• Support risk reviews and reporting cycles
• Collaborate with Risk and Compliance teams to align enterprise risk frameworks

4. KPI / KRI Monitoring & Reporting

• Collect and validate cybersecurity KPIs/KRIs from relevant stakeholders
• Prepare periodic reports with trend analysis to support regulatory maturity (Level 3+)
• Identify and escape performance gaps

Requirements

• We are looking for candidates with 1–3 years of experience in a dedicated Cybersecurity GRC role.
• years in a dedicated Cybersecurity GRC role
• Hands-on experience with SAMA CSF compliance within regulated entities
• Experience in audit evidence preparation and regulatory assessments
• Strong background in drafting cybersecurity policies and procedures
• Experience using GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust, etc.)
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field
• Certifications inISO 27001 Lead Implementer / Lead Auditor,Security+, (ISC)² CC, CGRC orCISA or CRISC
• Speaks English and Arabic

Preferred Qualifications

• Experience with PDPL and NDMO regulations
• PCI-DSS compliance exposure
• Knowledge of cloud security (AWS, Azure, GCP, OCI)
• Experience in fintech or financial services\
• Familiarity with frameworks like ISO 27001, NIST, COBIT

Important Note:Job role open for Saudi Nationals only.