Cybersecurity Compliance Specialist

About the Role

flynas is seeking a Cybersecurity Compliance Specialist to join its team in Riyadh, Saudi Arabia. This full-time role involves supporting and conducting cybersecurity compliance activities to ensure the organization adheres to applicable cybersecurity laws, regulations, policies, standards, and internal requirements. The specialist will contribute to compliance assessments, evidence collection, gap identification, and regulatory reporting.

Key Responsibilities

• Monitor and assess organizational compliance with cybersecurity laws, regulations, and frameworks, including National Cybersecurity Authority (NCA) requirements such as Essential Cybersecurity Controls (ECC), Critical Systems Cybersecurity Controls (CSCC), Cloud Cybersecurity Controls (CCC), and Data Cybersecurity Controls (DCC).
• Identify cybersecurity compliance gaps and coordinate the tracking and timely remediation of findings with control owners.
• Maintain awareness of applicable cybersecurity compliance obligations and requirements, including changes to regulatory and organizational mandates.
• Maintain accurate, complete, and traceable records of cybersecurity compliance assessments, findings, corrective actions, and supporting evidence.
• Support cybersecurity regulatory assessments, internal and external audits, and other compliance reviews by coordinating information, evidence, responses, and follow-up actions.
• Provide cybersecurity compliance guidance to internal stakeholders regarding applicable requirements, controls, policies, and standards.

Operational Duties

• Coordinate the preparation and collection of evidence and documentation for regulatory assessments and audits.
• Track cybersecurity-related audit, regulatory, and assessment findings through remediation and closure.
• Support the review and update of cybersecurity policies, standards, procedures, and control requirements to ensure alignment with regulatory mandates.
• Assist with cybersecurity compliance assessments of vendors and third parties, including the preparation and review of compliance questionnaires and supporting evidence.
• Maintain and track approved cybersecurity exceptions and waivers, including conditions, compensating controls, owners, approvals, and expiry dates.
• Prepare periodic cybersecurity compliance reports and contribute to dashboards and management reporting.
• Coordinate with IT, business units, control owners, and other stakeholders to obtain information and evidence for compliance assessments.
• Participate in cybersecurity compliance awareness and communication activities.
• Track remediation actions with responsible control and process owners, monitor target dates, and escalate overdue actions.
• Conduct periodic compliance assessments and checks against applicable cybersecurity regulations, frameworks, policies, standards, procedures, and control requirements.
• Collect, review, validate, and maintain supporting evidence to assess the implementation and effectiveness of cybersecurity controls.

Experience Required

Candidates should possess 2-5 years of relevant experience in cybersecurity compliance or a related field.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia.