Senior Information Security GRC Specialist - Jeddah, KSA

NTT; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology company in Saudi Arabia is seeking an advanced information security professional to join their GRC team. The role involves leading risk assessments, maintaining security policies, and ensuring compliance with regulations. Candidates must possess a strong background in cybersecurity and relevant certifications to succeed in driving security initiatives and supporting team development.

Qualifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or related field.
• Advanced experience in information security and GRC-related roles.
• Strong knowledge of NCA regulations and Essential Cybersecurity Controls.

Responsibilities

• Leads risk assessments and gap analyses to identify vulnerabilities.
• Develops and maintains security policies and procedures.
• Provides guidance and support to junior GRC team members.

Skills

Risk Assessment

Policy Management

Cybersecurity

Project Management

Communication

Education

Bachelor’s degree in Information Technology

Security certifications (CISA, CRISC, etc.)

Job description

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Please note that this role is based in Jeddah, KSA

Job Description

Key Responsibilities :

• Leads risk assessments and gap analyses to identify vulnerabilities and recommends risk mitigation strategies.
• Develops and maintains security policies, standards, and procedures.
• Collaborates with legal and compliance teams to ensure adherence to regulatory requirements.
• Provides guidance and support to junior GRC team members.
• Assists in the creation and delivery of security awareness and training programs.
• Participates in security incident response activities as needed.
• Contributes to the continuous improvement of the information security program.
• Assists in policy management and refinement.
• Performs any other related task as required.
• Closing gabs on key findings during internal audits and evidence validation.

Knowledge and Attributes :

• Strong knowledge and experience with NCA regulations.
• Strong experience in Essential Cybersecurity Controls (ECC).
• Advanced understanding of information security frameworks and standards.
• Advanced proficiency in conducting risk assessments, analyzing security controls, and policy management.
• Excellent communication and interpersonal skills for collaborating with various stakeholders.
• Strong project management skills for handling security initiatives.
• Advanced familiarity with legal and compliance aspects related to information security.

Academic Qualifications and Certifications :

• Bachelor’s degree or equivalent in Information Technology or Computer Science degree or related field.
• Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.
• Certifications such as Lead audit / Implementer - ISO 27001, SOC TSP preferred.

Required Experience :

• Advanced experience in information security, including GRC-related roles.
• Advanced experience in leading risk assessments, compliance efforts, security awareness initiatives, and policy management.

Additional Career Level Description :

Knowledge and application :

• Applies advanced wide-ranging experience and in-depth professional knowledge to develop and resolve complex models and procedures in creative way.
• Directs the application of existing principles and guides development of new policies and ideas; Determines own methods and procedures on new assignments.

Problem solving :

• Understands and works on complex issues where analysis of situation or data requires an in-depth evaluation of variable factors, solutions may need to be devised from limited information.
• Exercises judgment in selecting methods, evaluating, adapting of complex techniques and evaluation criteria for obtaining results.

Interaction :

• Frequently advises key people outside own area of expertise on complex matters, using persuasion in delivering messages

Impact :

• Develops and manages operational initiatives to deliver tactical results and achieve medium-term goals.

Accountability :

• May be accountable through team for delivery of tactical business targets.
• Work is reviewed upon completion and is consistent with departmental objectives.

Workplace type : On-site Working

About NTT DATA

NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.