GRC Senior Specialist

About the Role

مرنة للتمويل is seeking a GRC Senior Specialist to join their team in Riyadh, Saudi Arabia. This full-time role focuses on establishing and managing governance, risk, and compliance activities within the cybersecurity function. The specialist will ensure that policies, controls, and regulatory obligations, particularly under SAMA CSF and NCA frameworks, are properly documented, implemented, monitored, and reported.

Key Responsibilities

• Develop, document, and maintain cybersecurity policies, standards, and procedures, ensuring alignment with SAMA CSF, NCA ECC, DCC, and other applicable regulatory frameworks.
• Design, create, and monitor cybersecurity Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs), producing periodic dashboards and reports for management.
• Govern cybersecurity requirements within the change management process, ensuring security controls are embedded and enforced.
• Plan and conduct compliance activities, including self-assessments, gap analyses, evidence collection, and tracking of regulatory observations.
• Conduct cybersecurity risk assessments, maintain the risk register, and track treatment and remediation efforts.
• Conduct third-party and vendor cybersecurity risk assessments and periodic reviews, including assessing right-to-audit clauses and contractual security requirements.
• Support internal and regulatory audits and coordinate the closure of findings.

Experience and Qualifications

Candidates for this role should possess 2-5 years of relevant experience in governance, risk, and compliance within a cybersecurity context. A strong understanding of regulatory frameworks such as SAMA CSF and NCA is essential for this position.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The GRC Senior Specialist will operate within a professional environment, contributing to the cybersecurity resilience of مرنة للتمويل.