Saudi Cyber GRC Specialist: Audit & Compliance

SiFi - Simplified Financial Solutions Company; Riyadh; On-site; SAR 120,000 - 180,000; Full time

Job summary

SiFi - Simplified Financial Solutions Company in Riyadh seeks a Cybersecurity GRC Specialist to manage governance, risk, and compliance across regulatory frameworks. The role focuses on evidence management, policy governance, risk tracking, and KPI/KRI reporting to ensure measurable, defensible controls.

The candidate will work with the CISO and risk teams to maintain audit readiness, map policies to SAMA CSF, and drive continuous improvement in regulatory maturity.

Qualifications

• 1–3 years in a dedicated Cybersecurity GRC role.
• Hands-on experience with SAMA CSF compliance within regulated entities.
• Experience in audit evidence preparation and regulatory assessments.
• Strong background in drafting cybersecurity policies and procedures.
• Experience using GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust).

Responsibilities

• Maintain and manage the compliance tracker across SAMA CSF, PDPL/NDMO, and PCI-DSS.
• Own the full evidence lifecycle: collection, validation, and documentation.
• Ensure continuous audit readiness with traceable, control-aligned evidence.
• Track regulatory findings and remediation plans, ensuring timely closure.
• Provide regular compliance status reports to the CISO and relevant committees.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Map policies to SAMA CSF controls and maintain the risk register.
• Collaborate with Risk and Compliance teams to align enterprise risk frameworks.
• Support risk reviews and reporting cycles.

Skills

GRC experience

SAMA CSF

Audit evidence

Policy drafting

GRC tools

Education

Bachelor's degree in Cybersecurity or related field

Tools

Archer

ServiceNow GRC

OneTrust

Job description

SiFi - Simplified Financial Solutions Company in Riyadh seeks a Cybersecurity GRC Specialist to manage governance, risk, and compliance across regulatory frameworks. The role focuses on evidence management, policy governance, risk tracking, and KPI/KRI reporting to ensure measurable, defensible controls.

The candidate will work with the CISO and risk teams to maintain audit readiness, map policies to SAMA CSF, and drive continuous improvement in regulatory maturity.