GRC SME

Location: Riyadh, Riyadh, Saudi Arabia

Job Description – GRC SME (5+ Years Experience)
Job Location: Riyadh - KSA

 

We are looking for an experienced GRC SME with strong expertise in GRC implementation, information security, risk, compliance, and audit management.

Key Requirements

• Must have hands-on GRC implementation experience with a minimum of 4 end-to-end implementation projects.
• Must possess relevant certifications such as ISO, CISA/CISM, and ITIL.
• Should have project management experience in GRC programs and implementations.
• Should have experience in internal and external audits within the GRC domain.

Technical Expertise

• Should have strong experience in control mapping, control design, and control testing using GRC.
• Should have experience in risk assessment and risk management in GRC.
• Should have expertise in GRC KRAs, KPIs, dashboard preparation, and management reporting in GRC.
• Should have working knowledge of SecOps, Third-Party Risk Management (TPRM), and Business Continuity Management (BCM), preferably integrated with GRC.

Regulatory & Compliance Knowledge

Must have experience working with the Saudi Arabia Information Security Regulatory Framework, especially frameworks related to:

• Information Security
• Artificial Intelligence
• Cloud Security

Should have knowledge of key Saudi regulatory and governance frameworks, including:

• NCA Essential Cybersecurity Controls (ECC)
• NCA Cloud Cybersecurity Controls (CCC)
• Saudi Personal Data Protection Law (PDPL)
• SDAIA AI Ethics Framework
• SAMA cybersecurity-related frameworks, where applicable

Must have excellent communication skills in both English and Arabic.