GIS Governance, Risk, and Compliance (GRC) - Cybersecurity Auditor Federal - Kingdom of Saudi Arabia

Netskope; South Africa; On-site; ZAR 1 175 000 - 1 512 000; Full time

Job summary

A leading cybersecurity firm is seeking a GRC Cybersecurity Auditor to join their team in South Africa. This role is essential for managing compliance with KSA cybersecurity regulations and maintaining effective communication with stakeholders. Candidates should have a strong background in cybersecurity, particularly in cloud/SaaS environments, with 3-5 years of relevant experience. This position requires analytical skills and proficiency in Arabic and English, aimed at developing critical cybersecurity policies and conducting risk assessments.

Benefits

Supportive company culture

Employee recognition events

Catered lunches

Qualifications

• 3-5 years of experience in cybersecurity, preferably in cloud/SaaS environments.
• Proven knowledge of governance standards: ECC-1, NIST, ISO, CSA.

Responsibilities

• Develop and maintain documentation for Cybersecurity policies.
• Perform risk analysis for major application changes.
• Track audit findings and ensure mitigation actions are taken.

Skills

Knowledge of SASE/SSE architecture

Threat intelligence

Risk management frameworks

Bilingual in Arabic and English

Analytical skills

Education

Bachelor's degree in Cybersecurity

Tools

GRC tools

Vulnerability management tools

Job description

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter @Netskope.

About the position

This role is a member of the Global Information Security (GIS) team which has oversight and operational responsibilities for the information security of Netskope. The GRC Cybersecurity Auditor (GRC‑GRC‑005) - Federal KSA will be a key member of the Federal GRC team responsible for collaborating with the business on Federal KSA GRC and Cybersecurity activities, ensuring compliance objectives are being achieved, and being the designated contact for communication and incident response with the KSA. This role will be critical as we mature our controls and overall Information Security program to support the Kingdom of Saudi Arabia (KSA) Essential Cybersecurity Controls (ECC‑1: 2018) requirements.

Responsibilities

• Develop and maintain mandatory documentation Cybersecurity policies in support of audits and ECC compliance needs.
• Manage and organize KSA National Cybersecurity Authority (NCA) and Communications Space and Technology (CST) Commission Assessments and Certifications – Liaison with auditors and accreditation programs
• Perform risk analysis whenever an application or system undergoes a major change
• Track audit findings and recommendations to ensure that appropriate mitigation actions are taken
• Ensure applicable KSA laws, statutes and regulatory documents are reflected in the cybersecurity policies
• Monitor control effectiveness and escalate where issues are identified
• Assist in development and maintenance of Information Security control mappings to defined frameworks
• Collaborate with Internal Audit and other assessors on Audits for Technology
• General knowledge of security technologies and approaches to secure an organization.
• General knowledge of risk management and how to use risk management in a security program.

Requirements / Qualifications

Mandatory (per NCA CTS)

• Saudi national located in the KSA
• Meets Saudi Cybersecurity Workforce Framework (SCyWF) requirements
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field
• Minimum 3‑5 years in cybersecurity role, preferably in cloud/SaaS environments
• Proven knowledge of:
  • SASE/SSE architecture and security implications
  • Threat intelligence and risk management frameworks
  • Governance standards: ECC-1, NIST, ISO, CSA

Preferred

• Master's Degree in Cybersecurity, Risk Management, or IT Management
• Certifications: CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, CCSK
• Prior experience liaising with regulators (e.g., NCA, CITC, SAMA, etc.)
• Familiarity with multi‑cloud environments (AWS, Azure, GCP)

Desired Skills

• Experience in performing risk assessments
• Experience with vulnerability management tools and vulnerability risk analysis
• Experience with King of Saudi Arabia (KSA) Essential Cybersecurity Controls (ECC‑1: 2018) program and framework and its application to the NCA/CTS program requirements
• Must have knowledge and experience in managing GRC tools.
• Must be highly analytical with the ability to present your analysis
• Must have excellent written and verbal communication (Arabic and English)
• Must have experience in supporting customer audits
• General understanding of Cloud technologies
• General understanding of meeting multiple federal and industry compliance frameworks such as ECC, ISO 27001, SSAE-18 SOC2, CSA STAR, HIPAA, PCI-DSS, etc.
• Ability to be an active member of a team
• Self‑motivation to work on tasks independently within the team
• Ability to educate other members of the on existing processes and technologies
• Self‑starter and quick learner

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field

Employment Information

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.