Cyber Security Grc Specialist

Description:

Lead and operate Governance, Risk & Compliance (GRC) activities for the bank’s information security program — ensure regulatory compliance (SAMA, NCA, CMA as applicable), manage information security risk, and embed security controls across people, process and technology.

Required Qualifications & Skills

Bachelor’s degree in IT, Cybersecurity, Information Systems, or related.
5+ years GRC experience in cybersecurity, ideally in banking/financial services.
Strong knowledge of SAMA cybersecurity framework and Saudi regulatory landscape.
Hands-on with ISO 27001, NIST CSF, PCI-DSS, and risk assessment methodologies.
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust, MetricStream) and risk registers.
Familiar with vulnerability management, penetration testing lifecycle, and control remediation.
Excellent stakeholder management, report writing and presentation skills.
English and Arabic language proficiency preferred.

Certifications (preferred)
CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, SAMA-related training.