GRC Specialist (Information Security, Privacy and Business Continuity)

KalSoft; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

KalSoft is seeking an experienced GRC Specialist to support and operate Information Security, Privacy, Business Continuity, Risk Management, and Compliance programs. You will maintain governance records, drive audits, and coordinate vendor risk assessments, with a focus on ISO standards and regulatory requirements.

The role includes managing GRC platforms, preparing dashboards and reports, and delivering awareness trainings in English and Arabic.

Qualifications

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, Privacy, Business Continuity, or related fields.
• Experience supporting ISO 27001, ISO 22301, and PDPL compliance initiatives.
• Experience maintaining risk registers, compliance registers, and governance documentation.
• Hands-on experience coordinating audits, assessments, and evidence management activities.
• Experience conducting vendor risk and third-party assessments.
• Experience working with GRC tools/platforms and management reporting dashboards.
• Strong communication, stakeholder management, and documentation skills.
• Fluent in English and Arabic.

Responsibilities

• Support the operation and continuous improvement of Information Security, Privacy, Business Continuity, and Compliance programs.
• Maintain risk registers, compliance registers, audit trackers, and governance documentation.
• Coordinate and track ISO 27001, ISO 22301, PDPL, and regulatory compliance initiatives.
• Conduct vendor security, privacy, and business continuity assessments and track remediation activities.
• Coordinate audit requests, evidence collection, findings management, and corrective action follow-up.
• Maintain ROPA, DPIA, privacy incident, BIA, BCP, and Disaster Recovery records.
• Support administration of GRC platforms, including user management, workflows, dashboards, and reporting.
• Prepare monthly and quarterly reports, KPIs, dashboards, and management presentations.
• Deliver information security, privacy, and business continuity awareness activities and training sessions.
• Monitor risks, findings, issues, and action plans and ensure timely closure through stakeholder coordination.

Skills

Information Security

GRC

Risk Management

Compliance

Privacy

Business Continuity

Vendor Risk Management

GRC Tools / Platforms

Tools

GRC platforms

Job description

We are seeking an experienced GRC Specialist to support the implementation and day-to-day operations of Information Security, Privacy, Business Continuity, Risk Management, Compliance, Internal Audit Coordination, Vendor Risk Management, and GRC platform activities. The ideal candidate will be responsible for monitoring compliance, maintaining governance records, coordinating assessments and audits, managing risk and compliance registers, and preparing management reports and dashboards.

Key Responsibilities

• Support the operation and continuous improvement of Information Security, Privacy, Business Continuity, and Compliance programs.
• Maintain risk registers, compliance registers, audit trackers, and governance documentation.
• Coordinate and track ISO 27001, ISO 22301, PDPL, and regulatory compliance initiatives.
• Conduct vendor security, privacy, and business continuity assessments and track remediation activities.
• Coordinate audit requests, evidence collection, findings management, and corrective action follow-up.
• Maintain ROPA, DPIA, privacy incident, BIA, BCP, and Disaster Recovery records.
• Support administration of GRC platforms, including user management, workflows, dashboards, and reporting.
• Prepare monthly and quarterly reports, KPIs, dashboards, and management presentations.
• Deliver information security, privacy, and business continuity awareness activities and training sessions.
• Monitor risks, findings, issues, and action plans and ensure timely closure through stakeholder coordination.

Requirements

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, Privacy, Business Continuity, or related fields.
• Experience supporting ISO 27001, ISO 22301, and PDPL compliance initiatives.
• Experience maintaining risk registers, compliance registers, and governance documentation.
• Hands-on experience coordinating audits, assessments, and evidence management activities.
• Experience conducting vendor risk and third-party assessments.
• Experience working with GRC tools/platforms and management reporting dashboards.
• Strong communication, stakeholder management, and documentation skills.
• Fluent in English and Arabic.

Preferred Certifications

• CISSP
• CISM
• CRISC
• CGRC
• ISO 27001 Lead Implementer / Lead Auditor
• ISO 22301 Lead Implementer / Lead Auditor
• CIPM
• CIPP
• CDPSE
• CBCI