GRC Specialist

Managed.sa; Jeddah; On-site; SAR 70,000 - 100,000; Full time

Job summary

Managed.sa seeks a motivated GRC Specialist to support a cybersecurity project based in Jeddah. The role focuses on governance, risk, and compliance with a strong interest in cybersecurity risk management, collaborating with business and technical stakeholders to assess risks and maintain compliance documentation.

Key responsibilities include risk assessments, maintaining risk registers, policy development, framework alignment, and audits.

Qualifications

• Bachelor's degree in cybersecurity, information security, information technology, computer science, or a related field.
• 1.5–3 years of relevant experience in cybersecurity GRC.
• Practical experience in cybersecurity risk assessment and risk management.
• Familiarity with frameworks such as NCA ECC, ISO 27001, ISO 31000, and NIST CSF.
• Strong documentation, reporting, and stakeholder communication skills.
• Availability to work full-time on-site in Jeddah; quick joiners prioritized.

Responsibilities

• Conduct cybersecurity risk assessments and document identified risks.
• Maintain risk registers, treatment plans, and follow-up actions.
• Support development and review of cybersecurity policies, procedures, and standards.
• Assess compliance with applicable cybersecurity frameworks and regulatory requirements.
• Identify control gaps and recommend remediation actions.
• Collect, organize, and review compliance evidence.
• Prepare risk and compliance reports for management and project stakeholders.
• Monitor remediation activities and follow up with relevant teams.
• Support internal and external cybersecurity audits and assessments.
• Coordinate with business, IT, cybersecurity, and project stakeholders.

Skills

GRC

Risk assessment

Documentation

Stakeholder communication

Cybersecurity

Independent work

Education

Bachelor's degree (Cybersecurity/InfoSec/IT/CS)

Job description

Job Description

Managed.sa is seeking a motivated GRC Specialist to support a cybersecurity project based in Jeddah.

The ideal candidate will have practical experience in Governance, Risk, and Compliance, with a strong interest in cybersecurity risk management. This role requires working closely with business and technical stakeholders to assess risks, maintain compliance documentation, and support the implementation of cybersecurity controls.

Key Responsibilities

• Conduct cybersecurity risk assessments and document identified risks.
• Maintain risk registers, treatment plans, and follow-up actions.
• Support the development and review of cybersecurity policies, procedures, and standards.
• Assess compliance with applicable cybersecurity frameworks and regulatory requirements.
• Identify control gaps and recommend appropriate remediation actions.
• Collect, organize, and review compliance evidence.
• Prepare risk and compliance reports for management and project stakeholders.
• Monitor remediation activities and follow up with relevant teams.
• Support internal and external cybersecurity audits and assessments.
• Coordinate with business, IT, cybersecurity, and project stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
• Approximately 1.5-3 years of relevant experience in cybersecurity GRC.
• Practical experience in cybersecurity risk assessment and risk management.
• Familiarity with cybersecurity frameworks and standards such as:
  • NCA ECC
  • ISO 27001
  • ISO 31000
  • NIST Cybersecurity Framework
• Strong documentation, reporting, and stakeholder communication skills.
• Ability to work independently and follow up on multiple risk and compliance activities.
• Professional certifications in GRC, cybersecurity, or risk management are preferred.
• Availability to work full-time on-site in Jeddah.
• Candidates who can join within a short timeframe will be prioritized.