Cybersecurity GRC Specialist

About the Role

Zamil Offshore Services Company is seeking a Cybersecurity GRC Specialist to join their team in Al Khobar, Eastern Region. This full-time position involves establishing and overseeing the organization's cybersecurity governance, risk, and compliance framework, ensuring alignment with regulatory requirements, industry standards, and business objectives. The role requires 2-5 years of relevant experience.

Key Responsibilities

• Develop and maintain cybersecurity policies, procedures, and control documentation.
• Drive the organization’s cybersecurity awareness, phishing, and training initiatives.
• Ensure policies are updated, communicated, and enforced across departments.
• Align governance documents with NCA ECC, ISO 27001, and legal obligations.
• Conduct risk assessments, maintain a risk register, and define treatment plans.
• Ensure compliance with NCA ECC, ISO 27001, and Saudi PDPL requirements.
• Perform third-party/vendor risk assessments and due diligence reviews.
• Track remediation plans and prepare for internal/external audits.
• Maintain dashboards for compliance posture and control performance.
• Develop, distribute, and track employee security training and awareness programs.
• Conduct phishing simulations and evaluate response trends.
• Collaborate with HR on onboarding and offboarding security procedures.
• Maintain an evidence repository for audits and compliance tracking.
• Map security controls to NCA ECC domains and ensure maturity documentation.

Experience and Qualifications

Candidates should possess 2-5 years of experience in a relevant cybersecurity role, with a focus on governance, risk, and compliance. A strong understanding of regulatory requirements, industry standards, and business objectives related to cybersecurity is essential.

Technical Knowledge

The role requires familiarity with cybersecurity frameworks and standards, including NCA ECC, ISO 27001, and Saudi PDPL requirements. Experience in developing and maintaining cybersecurity policies, conducting risk assessments, and managing compliance documentation is necessary.

Work Environment

This is a full-time position based in Al Khobar, Eastern Region. The specialist will work within a team dedicated to maintaining and enhancing the organization's cybersecurity posture.

Application Process

Further details regarding the application process and salary will be disclosed to qualified candidates.