GRC Senior Specialist

مرنة للتمويل; Riyadh; On-site; SAR 246,000 - 379,000; Full time

Job summary

مرنة للتمويل is seeking a GRC Senior Specialist to establish and run governance, risk, and compliance for the cybersecurity function, ensuring policies and controls meet SAMA CSF, NCA, and other frameworks. You will design KPIs, monitor risks, and coordinate audits to support secure operations.

Ideal candidates have a bachelor’s degree in a relevant field and at least three years of cybersecurity GRC experience, with working knowledge of SAMA CSF, NCA, and NIST.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 3 years of relevant experience in cybersecurity GRC, risk, or compliance.
• Working knowledge of SAMA CSF, NCA, and NIST.

Responsibilities

• Establish and run governance, risk, and compliance activities for the cybersecurity function across policies, controls, and regulatory obligations.
• Develop, maintain, and report dashboards and KPIs/KRIs for management.
• Govern cybersecurity requirements within change management, embedding security controls.

Skills

SAMA CSF

NCA

NIST

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Job description

About the Company : GRC Senior Specialist

About the Role

Establish and run the governance, risk, and compliance activities of the cybersecurity function, ensuring policies, controls, and regulatory obligations under SAMA CSF, NCA are documented, implemented, monitored, and reported.

Responsibilities

• Develop, documents, and maintain cybersecurity policies, standards, and procedures, and ensure alignment with SAMA CSF, NCA ECC, DCC, and other applicable regulatory frameworks.
• Design, create, and monitor cybersecurity KPIs and KRIs, and produce periodic dashboards and reports for management.
• Govern the cybersecurity requirements within the change management process, ensuring security controls are embedded and enforced.
• Plan and conduct compliance activities, including self-assessments, gap analyses, evidence collection, and regulatory observation tracking.
• Conduct cybersecurity risk assessments, maintain the risk register, and track treatment and remediation.
• Conduct third-party and vendor cybersecurity risk assessments and periodic reviews, including right-to-audit and contractual security requirements.
• Support internal and regulatory audits and coordinate the closure of findings.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 3 years of relevant experience in cybersecurity GRC, risk, or compliance.
• Working knowledge of SAMA CSF, NCA, and NIST.