GRC Specialist📣 إعلان

منذ ساعة واحدة تقريباً

	نوع العقد	دوام كامل
	طبيعة الوظيفة	بالموقع
	الموقع	جدة

وصف الوظيفة

About ******* and the Role

******* is seeking a GRC Specialist to join their team for a cybersecurity project based in Jeddah, Makkah. This is a full-time, on-site position where the specialist will contribute to strengthening the organization's cybersecurity posture.

Role Overview

The GRC Specialist will support the cybersecurity project by applying practical experience in Governance, Risk, and Compliance, with a focus on cybersecurity risk management. The role involves close collaboration with business and technical stakeholders to conduct risk assessments, maintain compliance documentation, and facilitate the implementation of cybersecurity controls.

Key Responsibilities

Conduct cybersecurity risk assessments and document identified risks.
Maintain risk registers, treatment plans, and follow-up actions.
Support the development and review of cybersecurity policies, procedures, and standards.
Assess compliance with applicable cybersecurity frameworks and regulatory requirements.
Identify control gaps and recommend appropriate remediation actions.
Collect, organize, and review compliance evidence.
Prepare risk and compliance reports for management and project stakeholders.
Monitor remediation activities and follow up with relevant teams.
Support internal and external cybersecurity audits and assessments.
Coordinate with business, IT, cybersecurity, and project stakeholders.

Required Qualifications and Experience

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
Approximately ** years of relevant experience in cybersecurity GRC.
Practical experience in cybersecurity risk assessment and risk management.

Essential Skills and Attributes

Familiarity with cybersecurity frameworks and standards.
Strong documentation, reporting, and stakeholder communication skills.
Ability to work independently and manage multiple risk and compliance activities.
Professional certifications in GRC, cybersecurity, or risk management are preferred.