Security Compliance Officer

About DXC Technology

DXC Technology assists global companies in managing their mission-critical systems and operations. The company focuses on modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private, and hybrid cloud environments. With over 125,000 employees in more than 70 countries, DXC Technology delivers transformative technologies to businesses and public sector organizations worldwide, driving performance, competitiveness, and enhanced customer experience.

The Role of Security Compliance Officer

DXC Technology is seeking a Security Compliance Officer for a full-time position in Riyadh, Saudi Arabia. This role serves as the primary point of accountability for regulatory cybersecurity compliance within DXC's Saudi-banking engagement. The officer will be responsible for interpreting, implementing, and evidencing adherence to key cybersecurity frameworks and standards, ensuring the organization's security posture meets the stringent requirements of the financial sector.

Key Responsibilities

• Track updates to SAMA Cybersecurity Framework (CSF), SAMA Operating Regulations, and NCA Essential Cybersecurity Controls (ECC), translating requirements into actionable technical and process controls across security domains (Edge, Network, IAM/PAM, Data/Endpoint, DR, SOC).
• Maintain a detailed control catalogue within ServiceNow GRC, including control IDs, owners, evidence artifacts, and test frequency.
• Map international frameworks such as ISO 27001 and NIST CSF to Saudi regulations to facilitate unified reporting.
• Plan and lead internal readiness reviews, tabletop tests, and gap assessments.
• Coordinate external regulator and third-party audits, ensuring timely evidence submission and walkthroughs.
• Log audit findings, agree on action plans, track due dates, and validate the closure of remediation items.
• Produce monthly compliance dashboards, including heat-maps, Key Risk Indicators (KRIs), and trends, for the CISO, DXC PMO, and client executives.
• Draft and refresh security policies, standards, and Standard Operating Procedures (SOPs) triggered by regulatory changes.
• Deliver awareness sessions to engineers and business units regarding their control obligations.
• Collaborate with the Delivery Lead, Security Operations Center (SOC), and engineering teams to embed compliance checkpoints into change, incident, and project lifecycles, ensuring new solutions incorporate control design, testing, and evidence plans from the outset.

Required Qualifications and Experience

Candidates should possess 5-10 years of experience in a relevant field. The role requires a strong understanding and practical application of the SAMA Cybersecurity Framework, NCA Essential Cybersecurity Controls (ECC), ISO 27001, and NIST CSF. Experience with ServiceNow GRC and other compliance tooling is essential for maintaining control matrices, coordinating audits, and tracking remediation activities.

Skills and Collaboration

This position demands close collaboration across various functions, including regulation monitoring, control ownership, audit management, risk reporting, and policy governance. The Security Compliance Officer will act as a cross-functional liaison with delivery, SOC, and engineering teams to integrate compliance throughout the project and solution lifecycle. Strong communication skills are necessary for briefing executive stakeholders on compliance posture and risk.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within a dynamic environment focused on cybersecurity compliance for the financial sector. The role involves working with global companies and public sector organizations, contributing to the security and scalability of critical IT systems.