InfoSec GRC Strategist — Risk, Compliance & Policy

NTT Limited; Jeddah; On-site; SAR 167,000 - 335,000; Full time

Job summary

NTT DATA in Jeddah, Saudi Arabia, seeks an experienced Information Security GRC Specialist to support the organization's security program by assessing risk, implementing controls, and ensuring regulatory compliance. You will collaborate with internal teams, develop security policies, and lead awareness initiatives while keeping the security posture strong in a dynamic, global ICT environment.

The role requires bachelor-level IT or CS, relevant security certifications such as CISA/CRISC, and

Qualifications

• Seasoned familiarity with information security frameworks and standards.
• Seasoned understanding of risk assessment methodologies, compliance, and policy development.
• Strong communication and interpersonal skills for effective collaboration.
• Seasoned project management skills for coordinating security initiatives.

Responsibilities

• Assists in conducting risk assessments and vulnerability assessments.
• Contributes to the development and maintenance of security policies and procedures.
• Collaborates with internal stakeholders to ensure compliance with industry standards and regulations.
• Participates in security awareness and training initiatives.
• Supports incident response activities and investigations as required.
• Monitors and reports on security compliance metrics.
• Assists in the implementation of security controls and best practices.
• Stays updated with emerging security threats and trends.

Skills

Info security frameworks

Risk assessment

Compliance

Policy development

Project management

Communication

Education

Bachelor's degree in IT/CS

Job description

NTT DATA in Jeddah, Saudi Arabia, seeks an experienced Information Security GRC Specialist to support the organization's security program by assessing risk, implementing controls, and ensuring regulatory compliance. You will collaborate with internal teams, develop security policies, and lead awareness initiatives while keeping the security posture strong in a dynamic, global ICT environment.

The role requires bachelor-level IT or CS, relevant security certifications such as CISA/CRISC, and