Senior Information Security GRC Specialist

Dimension Data / NTT ltd; Riyadh; On-site; SAR 120,000 - 150,000; Full time

Job summary

A leading company in IT Software Services is seeking a Senior Information Security GRC Specialist to oversee its information security program. The role involves leading risk assessments, developing security policies, and ensuring compliance with regulations. This position is based in Jeddah, KSA, and requires extensive experience in GRC roles. Candidates should have strong knowledge of NCA regulations and excellent communication skills.

Qualifications

• Extensive experience in information security, especially in GRC roles.
• Experience leading risk assessments, compliance efforts, and policy management.

Responsibilities

• Lead risk assessments and gap analyses to identify vulnerabilities.
• Develop and maintain security policies, standards, and procedures.
• Support and guide junior GRC team members.

Skills

Risk Assessments

Security Awareness

Policy Management

Communication

Project Management

Education

Bachelor's in Information Technology

Bachelor's in Computer Science

Tools

CISA

CRISC

COBIT

ISO 27001 Lead Auditor

SOC TSP

Job description

Senior Information Security GRC Specialist

Qualification: Bachelor's in Computer Application (Computers)

Nationality: Any Nationality

Vacancy: 1 Vacancy

Job Description

Your day at NTT DATA

The Senior Information Security Governance, Risk and Compliance (GRC) Specialist is an advanced subject matter expert responsible for overseeing the organization's information security program, focusing on governance, risk management, compliance, security awareness, and policy management.

This role involves leading risk assessments, developing security policies, ensuring compliance with industry standards and regulations, and fostering a culture of security awareness among employees. The role may also include providing guidance and support to junior members of the GRC team.

What you'll be doing

Please note that this role is based in Jeddah, KSA

Key Responsibilities:

• Lead risk assessments and gap analyses to identify vulnerabilities and recommend mitigation strategies.
• Develop and maintain security policies, standards, and procedures.
• Collaborate with legal and compliance teams to ensure regulatory adherence.
• Support and guide junior GRC team members.
• Assist in creating and delivering security awareness and training programs.
• Participate in security incident response activities.
• Contribute to the continuous improvement of the security program.
• Assist in policy management and updates.
• Perform other related tasks as required.
• Address key findings during internal audits and evidence validation.

Knowledge and Attributes:

• Strong knowledge of NCA regulations and experience with Essential Cybersecurity Controls (ECC).
• Understanding of information security frameworks and standards.
• Proficiency in risk assessments, security controls analysis, and policy management.
• Excellent communication and interpersonal skills.
• Strong project management skills.
• Familiarity with legal and compliance aspects of information security.

Academic Qualifications and Certifications:

• Bachelor's degree in Information Technology, Computer Science, or related field.
• Preferred certifications: CISA, CRISC, COBIT, IIA, ISO 27001 Lead Auditor/Implementer, SOC TSP.

Required Experience:

• Extensive experience in information security, especially in GRC roles.
• Experience leading risk assessments, compliance efforts, security awareness initiatives, and policy management.

Company Industry

• IT - Software Services

Department / Functional Area

• IT Software

Keywords

• Senior Information Security GRC Specialist

Disclaimer: Naukrigulf.com is a platform connecting jobseekers and employers. Applicants should verify the legitimacy of employers independently. We do NOT endorse requests for money or sharing sensitive personal information. For security advice, visit our website. For fraud concerns, email [e-mail].