IT GRC Specialist

About the Role

Sahm Capital is seeking an IT GRC Specialist to join its team in Riyadh, Saudi Arabia. This full-time role involves supporting IT governance, risk management, and compliance activities across the organization, with a focus on maintaining adherence to Saudi regulatory requirements within a financial services environment. The specialist will contribute to improving cybersecurity and governance practices.

Key Responsibilities

• Support compliance initiatives related to NCA, CMA, PDPL, and other applicable regulatory requirements.
• Assist in implementing and maintaining IT governance and cybersecurity frameworks, including ISO 27001 and related standards.
• Develop, review, and maintain IT policies, procedures, standards, and controls.
• Maintain the IT risk register and track remediation activities.
• Conduct IT and cybersecurity risk assessments for vendors and third parties.
• Support internal and external audits by coordinating evidence collection and remediation activities.
• Monitor compliance status and prepare governance and risk reports for management.
• Collaborate with IT, Security, Risk, and Business teams to enhance control effectiveness and regulatory readiness.

Qualifications and Experience

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or an equivalent field.
• 3–5 years of experience in IT Governance, Risk & Compliance (GRC), IT Audit, Information Security, or a related role.
• Experience working with regulatory frameworks such as NCA ECC, ISO 27001, PDPL, or financial-sector compliance requirements is preferred.
• Experience within financial services, fintech, banking, or capital markets is an advantage.
• Experience in the GCC region is a plus.

Required Skills

• Understanding of IT governance, risk management, and compliance principles.
• Familiarity with IT controls, including access management, change management, vulnerability management, and disaster recovery.
• Strong documentation, reporting, and audit coordination skills.
• Good analytical and stakeholder management abilities.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within a financial services environment. The role requires close collaboration with various internal teams, including IT, Security, Risk, and Business units.