Information Security GRC Specialist: Governance & Risk

tabby; Saudi Arabia; On-site; SAR 180,000 - 260,000; Full time

Job summary

Tabby is seeking an Information Security governance and risk professional to lead the development and maintenance of security policy frameworks, risk registers, and compliance programs. You will drive GRC initiatives and coordinate with stakeholders to ensure alignment with industry standards and regulatory requirements.

The role focuses on governance, risk management, and regulatory compliance across SAMA CSF, NCA, PDPL, ISO 27001, and PCI-DSS, delivering dashboards and continuous improvement

Qualifications

• Bachelor's degree in IT or related field.
• 1-3 years of professional experience in information security governance, risk management, compliance, or a closely related field.
• Hands-on experience with risk assessment, policy development, or compliance monitoring.
• Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC requirements is a strong advantage.
• Experience in a regulated Fintech or banking environment is preferred.
• ISO 27001 Foundation or Lead Implementer (preferred).
• CompTIA Security+ or equivalent.
• Working toward CRISC (Certified in Risk and Information Systems Control) or CISM.

Responsibilities

• Maintain and update the information security governance framework documentation policy library and associated standards and procedures.
• Draft and revise information security policies standards and baselines ensuring alignment with applicable regulatory requirements and business objectives.
• Monitor and track changes in legal regulatory and contractual requirements affecting information security.
• Maintain and update role and responsibility matrices RACI.

Skills

Risk assessment execution

Policy development

Compliance monitoring

GRC knowledge

Information security governance

Education

Bachelor's degree in IT or related field

Job description

Tabby is seeking an Information Security governance and risk professional to lead the development and maintenance of security policy frameworks, risk registers, and compliance programs. You will drive GRC initiatives and coordinate with stakeholders to ensure alignment with industry standards and regulatory requirements.

The role focuses on governance, risk management, and regulatory compliance across SAMA CSF, NCA, PDPL, ISO 27001, and PCI-DSS, delivering dashboards and continuous improvement