Cybersecurity GRC Specialist📣 Job Ad

About the Role

TIBAH Airports (Madinah) is seeking a Cybersecurity GRC Specialist to join its team in Medina, Al Madinah Province. This full-time role is essential for supporting the organization's cybersecurity governance, risk management, and compliance (GRC) activities. The specialist will ensure that cybersecurity strategies, policies, standards, and controls are effectively implemented and monitored across both IT and OT/ICS environments, aligning with regulatory, operational, and business requirements. Candidates should possess 2-5 years of relevant experience.

Role Purpose and Impact

The primary purpose of this position is to bolster the cybersecurity posture of TIBAH Airports by maintaining robust GRC frameworks. The specialist plays a critical role in identifying, assessing, and mitigating cybersecurity risks, ensuring that all operational processes and systems adhere to established security policies and regulatory mandates. This involves a continuous effort to monitor compliance and recommend improvements, thereby safeguarding critical airport and infrastructure systems.

Key Responsibilities

• Manage and oversee the implementation of cybersecurity strategies, policies, standards, and procedures across the organization.
• Conduct cybersecurity risk assessments to identify threats, vulnerabilities, and risks across IT and OT/ICS environments.
• Develop, track, and monitor cybersecurity risk treatment and mitigation plans, ensuring timely remediation of identified risks.
• Ensure IT activities, processes, and procedures comply with approved cybersecurity policies, standards, and regulatory requirements.
• Identify, document, review, and periodically update cybersecurity policies and procedures, including those related to OT/ICS infrastructure.
• Support cybersecurity compliance with applicable laws, regulations, standards, and frameworks.
• Support cybersecurity functions in integrating security requirements into new and changed systems, services, and projects.
• Provide GRC advisory support to IT, OT, and business stakeholders to ensure secure and compliant operations.
• Prepare periodic cybersecurity compliance and risk status reports and present updates to the Cybersecurity Manager.
• Monitor the overall cybersecurity compliance posture and recommend improvements where gaps are identified.
• Implement and support cybersecurity training and awareness programs to promote a strong security culture.
• Support internal and external cybersecurity audits, assessments, and reviews.
• Stay informed about emerging cybersecurity risks, threats, and regulatory changes relevant to airport and critical infrastructure environments.
• Perform other related cybersecurity GRC duties as assigned.

Qualifications and Experience

Candidates for the Cybersecurity GRC Specialist position are required to have 2-5 years of experience in cybersecurity governance, risk management, and compliance roles. A strong understanding of cybersecurity frameworks, regulatory requirements, and best practices applicable to critical infrastructure environments, particularly airports, is essential. The role demands proficiency in conducting risk assessments, developing mitigation plans, and ensuring adherence to security policies across complex IT and OT/ICS landscapes.

Work Environment

This full-time position is based in Medina, within the Al Madinah Province, at TIBAH Airports. The role operates within a dynamic environment that requires constant vigilance regarding emerging cybersecurity risks and regulatory changes pertinent to airport operations and critical infrastructure. The specialist will work closely with IT, OT, and business stakeholders, reporting directly to the Cybersecurity Manager.

Application Information

We invite qualified professionals to apply for this role. Salary details will be discussed during the interview process.