Cybersecurity Compliance Specialist

About the Role

flynas is seeking a Cybersecurity Compliance Specialist to join their team in Riyadh, Saudi Arabia. This full-time role is responsible for supporting and conducting cybersecurity compliance activities, ensuring the organization's adherence to applicable cybersecurity laws, regulations, policies, standards, and internal requirements. The specialist will support compliance assessments, evidence collection, gap identification, and corrective action tracking.

Key Responsibilities

• Monitor and assess organizational compliance with cybersecurity laws, regulations, and frameworks, including National Cybersecurity Authority (NCA) requirements such as ECC, CSCC, CCC, and DCC.
• Identify cybersecurity compliance gaps and coordinate the tracking and timely remediation of findings and corrective actions with control owners.
• Monitor and maintain applicable cybersecurity compliance obligations and requirements, including changes to regulatory and organizational mandates.
• Maintain accurate, complete, and traceable records of cybersecurity compliance assessments, findings, corrective actions, and supporting evidence.
• Support cybersecurity regulatory assessments, internal and external audits, and other compliance reviews by coordinating information, evidence, responses, and follow-up actions.
• Provide cybersecurity compliance guidance and support to internal stakeholders regarding applicable requirements, controls, policies, and standards.

Operational Duties

• Coordinate the preparation and collection of evidence and documentation for regulatory assessments and audits.
• Track cybersecurity-related audit, regulatory, and assessment findings through remediation and closure.
• Support the review and update of cybersecurity policies, standards, procedures, and control requirements to maintain alignment with regulatory mandates.
• Support cybersecurity compliance assessments of vendors and third parties, including the preparation and review of compliance questionnaires and supporting evidence.
• Maintain and track approved cybersecurity exceptions and waivers, including conditions, compensating controls, owners, approvals, and expiry dates.
• Prepare periodic cybersecurity compliance reports and contribute to dashboards and management reporting.
• Coordinate with IT, business units, control owners, and other stakeholders to obtain information and evidence for compliance assessments.
• Participate in cybersecurity compliance awareness and communication activities to promote understanding of applicable requirements and responsibilities.
• Track remediation actions with responsible control and process owners, monitor agreed target dates, and escalate overdue or unresolved actions.
• Conduct periodic compliance assessments and checks against applicable cybersecurity regulations, frameworks, policies, standards, procedures, and control requirements.
• Collect, review, validate, and maintain supporting evidence to assess the implementation and effectiveness of applicable cybersecurity controls.

Experience Required

Candidates should possess 2-5 years of relevant experience in cybersecurity compliance or a related field.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, focusing on maintaining and enhancing the organization's cybersecurity posture.