GRC Cyber security (2373)

2P Perfect Presentation; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

2P Perfect Presentation in Riyadh seeks an experienced Cybersecurity GRC Specialist with hands-on experience in Governance, Risk Management, Compliance, Business Continuity, and Security Awareness. This role focuses on developing and maintaining security policies and frameworks to protect organizational assets.

You will define KPIs, conduct risk assessments, manage risk registers, and lead BIA/BCP activities while ensuring compliance with NCA controls and ISO/IEC 27001.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• 3-5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions.
• Strong experience in Cybersecurity Governance, including policies, procedures, standards, strategies, and KPI development.
• Hands-on experience in Cybersecurity Risk Management, including risk assessments, risk registers, and risk treatment.
• Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements.
• Familiarity with ISO/IEC 27001 and cybersecurity compliance practices.
• Experience in Business Continuity, BIA, BCP development, and BCP testing.
• Experience in cybersecurity awareness programs and phishing simulations.
• Strong analytical, documentation, communication, and stakeholder-management skills.

Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks.
• Define and monitor cybersecurity KPIs and governance performance indicators.
• Conduct cybersecurity risk assessments and maintain organizational risk registers.
• Develop and follow up on risk treatment plans and mitigation actions.
• Assess cybersecurity compliance against applicable regulatory and industry requirements.
• Support compliance with frameworks and standards including NCA ECC, NCA DCC, NCA CCC, NCA TCC, CST CRF, ISO/IEC 27001.
• Conduct compliance assessments, identify gaps, and support remediation plans.
• Support Business Impact Analysis (BIA) activities.
• Develop, maintain, and test Business Continuity Plans (BCP).
• Participate in periodic BCP testing and continuity exercises.
• Develop and execute cybersecurity awareness campaigns and coordinate phishing simulations.
• Prepare cybersecurity governance, risk, compliance, and awareness reports for management.
• Coordinate with IT, infrastructure, business, risk, compliance, and other relevant stakeholders.

Skills

Cybersecurity governance

Risk management

Compliance

Business continuity

Security awareness

Phishing simulations

Stakeholder management

Documentation

Education

Bachelor's degree in Cybersecurity/IT

Job description

Since 2004, 2P - Perfect Presentation has been a leader in Saudi Arabia's ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise.

We are looking for an experienced Cybersecurity GRC Specialist with strong hands‑on experience in Cybersecurity Governance, Risk Management, Compliance, Business Continuity, and Security Awareness.

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks.
• Define and monitor cybersecurity KPIs and governance performance indicators.
• Conduct cybersecurity risk assessments and maintain organizational risk registers.
• Develop and follow up on risk treatment plans and mitigation actions.
• Assess cybersecurity compliance against applicable regulatory and industry requirements.
• Support compliance with frameworks and standards including:
• NCA ECC
• NCA DCC
• NCA CCC
• NCA TCC
• CST CRF
• ISO/IEC 27001
• Conduct compliance assessments, identify gaps, and support remediation plans.
• Support Business Impact Analysis (BIA) activities.
• Develop, maintain, and test Business Continuity Plans (BCP).
• Participate in periodic BCP testing and continuity exercises.
• Develop and execute cybersecurity awareness campaigns.
• Coordinate and conduct phishing simulation exercises.
• Prepare cybersecurity governance, risk, compliance, and awareness reports for management.
• Coordinate with IT, infrastructure, business, risk, compliance, and other relevant stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• 3-5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions.
• Strong experience in Cybersecurity Governance, including policies, procedures, standards, strategies, and KPI development.
• Hands-on experience in Cybersecurity Risk Management, including risk assessments, risk registers, and risk treatment.
• Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements.
• Familiarity with ISO/IEC 27001 and cybersecurity compliance practices.
• Experience in Business Continuity, BIA, BCP development, and BCP testing.
• Experience in cybersecurity awareness programs and phishing simulations.
• Strong analytical, documentation, communication, and stakeholder-management skills.

Preferred Certifications

• CompTIA Security+
• CISA - Certified Information Systems Auditor
• CRISC - Certified in Risk and Information Systems Control
• CISM - Certified Information Security Manager
• CISSP - Certified Information Systems Security Professional