Senior GRC & Cybersecurity Governance Specialist

Müller's Solutions; Riyadh; On-site; SAR 360,000 - 480,000; Full time

Job summary

Saudi Motorsport Company seeks a GRC Senior Specialist to provide governance, risk management and compliance consultancy. You will own the cybersecurity governance framework and ensure compliance with NCA and regional regulations.

You will develop policies, lead audits and manage risk, interacting with senior management to drive remediation and assurance across the organization. Fluency in Arabic and English is required.

Qualifications

• 7+ years in cybersecurity GRC with at least 3 years in KSA.
• Proven hands-on experience implementing NCA ECC/CCC and NCA self-assessments.
• Excellent knowledge of ISO 27001, ISO 31000, NIST CSF and PDPL.
• Experience writing policies and leading audits end to end.
• Familiar with GRC platforms (ServiceNow IRM, RSA Archer, MetricStream).
• Saudi national; fluent in Arabic and English; strong report writing skills.

Responsibilities

• Develop, review and maintain cybersecurity policies, standards and procedures.
• Lead compliance with NCA ECC, CCC, and other applicable frameworks (PDPL, ISO 27001).
• Run gap assessments and build remediation roadmaps with control owners.
• Own the cybersecurity risk register: identify, assess, treat and report risks.
• Conduct third-party and vendor risk assessments.
• Prepare SMC for internal, external and NCA audits, and manage evidence collection.
• Track compliance status and present risk and compliance reports to senior management.
• Support business continuity and disaster recovery planning from a security angle.
• Run security awareness programs and policy communication across the organization.
• Advise business and IT teams on regulatory and security requirements for new projects.

Skills

GRC frameworks

Policy development

Audits & compliance

ISO 27001

ISO 31000

NIST CSF

NCA ECC/CCC

GRC tools ServiceNow

Arabic & English

Vendor risk assessment

Education

Bachelor's degree in Cybersecurity, Information Systems, IT or related field

Tools

ServiceNow IRM/GRC

RSA Archer

MetricStream

Job description

Saudi Motorsport Company seeks a GRC Senior Specialist to provide governance, risk management and compliance consultancy. You will own the cybersecurity governance framework and ensure compliance with NCA and regional regulations.

You will develop policies, lead audits and manage risk, interacting with senior management to drive remediation and assurance across the organization. Fluency in Arabic and English is required.