IT Grc & Security Specialist

Description:

Are you an experienced IT Governance, Risk & Compliance (GRC) Specialist with strong expertise in ISO 27001 and security controls? We are looking for 2 skilled professionals to support enterprise-level governance, risk management, and audit readiness initiatives for a leading organization in Saudi Arabia.

🎯 Role Details

🔹 Position: IT GRC & Security Specialist
🔹 Openings: 2 Resources
🔹 Location: Onsite – Riyadh, Kingdom of Saudi Arabia
🔹 Experience: 8+ Years
🔹 Start Date: Immediate / Short Notice Preferred
🔹 Engagement: Long-Term / Full-Time

🎯 Key Responsibilities

✅ Maintain IT risk register and control status reporting
✅ Perform periodic access reviews (user & privileged access)
✅ Draft and update IT policies, standards, and procedures
✅ Support internal/external audits and evidence collection
✅ Track SLA performance and operational compliance
✅ Review Segregation of Duties (SoD) risks and mitigation plans
✅ Validate vendor compliance with security requirements
✅ Maintain control testing schedules and remediation tracking

🎯 Required Skills & Expertise

🔹 Strong knowledge of ISO 27001 governance and controls
🔹 Experience in risk assessment methodologies (likelihood/impact)
🔹 Expertise in audit evidence management and traceability
🔹 Hands-on experience in policy, standards, and SOP documentation
🔹 Understanding of enterprise access management models (IAM)
🔹 Strong analytical, documentation, and compliance skills

🎯 Certifications (Preferred)
✔ ISO 27001 Lead Implementer / Lead Auditor