Senior Information Security GRC Specialist

NTT Corporation; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology and business services firm in Saudi Arabia seeks a Senior Information Security Governance, Risk, and Compliance Specialist. This advanced role focuses on overseeing the organization’s information security program, leading risk assessments, developing policies, and ensuring compliance with regulations. Ideal candidates will have a strong background in information security, extensive knowledge of NCA regulations, and excellent project management skills. The role supports junior team members and fosters a culture of security within the organization.

Qualifications

• Strong knowledge and experience with NCA regulations.
• Advanced understanding of information security frameworks and standards.
• Advanced proficiency in conducting risk assessments and policy management.

Responsibilities

• Lead risk assessments and recommend risk mitigation strategies.
• Develop and maintain security policies and procedures.
• Collaborate with legal teams for regulatory adherence.
• Guide junior GRC team members.
• Assist in creating security awareness programs.

Skills

Knowledge of NCA regulations

Essential Cybersecurity Controls (ECC)

Information security frameworks and standards

Conducting risk assessments

Policy management

Communication and interpersonal skills

Project management skills

Legal and compliance aspects

Education

Bachelor’s degree in Information Technology or Computer Science

Security certifications (CISA, CRISC, COBIT, IIA)

ISO 27001, SOC TSP certifications

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Senior Information Security Governance, Risk and Compliance (GRC) Specialist is an advanced subject matter expert, responsible for playing a crucial part in overseeing the organization's information security program, with a focus on governance, risk management, compliance, security awareness, and policy management.
This role involves leading risk assessments, developing security policies, ensuring alignment with industry standards and regulations, and fostering a culture of security awareness among employees.
This role may be required to guidance and support to junior members of the GRC team.

Key Responsibilities:

• Leads risk assessments and gap analyses to identify vulnerabilities and recommends risk mitigation strategies.
• Develops and maintains security policies, standards, and procedures.
• Collaborates with legal and compliance teams to ensure adherence to regulatory requirements.
• Provides guidance and support to junior GRC team members.
• Assists in the creation and delivery of security awareness and training programs.
• Participates in security incident response activities as needed.
• Contributes to the continuous improvement of the information security program.
• Assists in policy management and refinement.
• Performs any other related task as required.
• Closing gabs on key findings during internal audits and evidence validation.

To thrive in this role, you need to have:

• Strong knowledge and experience with NCA regulations.
• Strong experience in Essential Cybersecurity Controls (ECC).
• Advanced understanding of information security frameworks and standards.
• Advanced proficiency in conducting risk assessments, analyzing security controls, and policy management.
• Excellent communication and interpersonal skills for collaborating with various stakeholders.
• Strong project management skills for handling security initiatives.
• Advanced familiarity with legal and compliance aspects related to information security.

Academic Qualifications and Certifications:

• Bachelor’s degree or equivalent in Information Technology or Computer Science degree or related field.
• Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.
• Certifications such as Lead audit/Implementer - ISO 27001, SOC TSP preferred.

Required Experience:

• Advanced experience in information security, including GRC-related roles.
• Advanced experience in leading risk assessments, compliance efforts, security awareness initiatives, and policy management.

Workplace type:

On-site Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.