Senior GRC Specialist: Risk, Compliance & Audit Leadership

CCDS; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

CCDS in Riyadh, Saudi Arabia, on-site, is seeking an experienced cybersecurity governance professional for a 13‑month project to support governance, risk, regulatory compliance, audit readiness, and executive reporting for a government entity.

The role requires 6+ years of experience, a Bachelor in CS or InfoSec, and familiarity with NCA and ISO/IEC 27001. You will manage policies, risk registers, third‑party risk, and provide dashboards and committee presentations.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.

Responsibilities

• Review and update cybersecurity policies, procedures, standards, and guidelines.
• Perform cybersecurity risk assessments across assets, systems, projects, and third parties.
• Maintain the cybersecurity risk register, develop treatment plans, track actions, and align with risk appetite.
• Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other frameworks.
• Support internal and external audits, prepare evidence, manage non-compliance cases, and close remediation.
• Operate or support eGRC and cybersecurity risk-management tools.
• Prepare management reports, executive dashboards, KPIs, and committee‑level presentations.

Skills

Stakeholder management

Governance

Risk management

Compliance

Executive reporting

eGRC tools

Education

Bachelor’s degree in Computer Science or Information Security

Tools

eGRC platforms

Job description

CCDS in Riyadh, Saudi Arabia, on-site, is seeking an experienced cybersecurity governance professional for a 13‑month project to support governance, risk, regulatory compliance, audit readiness, and executive reporting for a government entity.

The role requires 6+ years of experience, a Bachelor in CS or InfoSec, and familiarity with NCA and ISO/IEC 27001. You will manage policies, risk registers, third‑party risk, and provide dashboards and committee presentations.