Cybersecurity GRC Specialist

About the Role

Ninja, a quick-commerce company, is seeking a Cybersecurity GRC Specialist to join their team in Riyadh, Riyadh Province. This full-time role focuses on supporting cybersecurity governance, risk, and compliance activities across the Group, ensuring the maintenance of robust cybersecurity policies and controls.

Role Overview

The Cybersecurity GRC Specialist will be responsible for coordinating risk assessments, managing compliance evidence, and tracking remediation actions. The role also involves providing support for regulatory, audit, and assurance activities, contributing to the overall security posture of the organization.

Key Responsibilities

• Support the development and maintenance of cybersecurity policies, standards, procedures, and governance records.
• Coordinate cybersecurity risk assessments for systems, projects, suppliers, and business initiatives.
• Maintain risk registers, track treatment plans, and follow up on overdue actions.
• Support cybersecurity compliance assessments against regulatory and internal requirements.
• Coordinate the collection, validation, and organization of compliance and audit evidence.
• Support Internal Audit, external assessments, and regulatory reviews by preparing required cybersecurity evidence.
• Track audit findings, remediation actions, and closure evidence.
• Support cybersecurity due diligence and risk reviews for third parties and service providers.
• Maintain security exceptions, risk acceptance records, and required follow-ups.
• Prepare GRC reports, dashboards, and management updates.
• Identify control gaps and opportunities to improve cybersecurity governance processes.

Qualifications and Experience

Candidates should possess 2-5 years of experience in a relevant field. The role requires a solid understanding of cybersecurity governance, risk management, and compliance frameworks.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within a dynamic quick-commerce environment. The role involves working collaboratively to enhance the cybersecurity posture across the Group.

Application Process

Interested candidates are encouraged to apply. Salary details will be discussed during the interview process.