Cybersecurity GRC Specialist
Role Overview
Seeking a Cybersecurity Governance, Risk & Compliance (GRC) Specialist to support and strengthen information security governance, risk management, compliance, and assurance programs.
The ideal candidate will have hands-on experience in cybersecurity policy development, security risk assessments, compliance management, and ISO-based audits and certifications.
Key Skills for This Role
Full Job Posting
Location and Setup
- Riyadh, Saudi Arabia - remote for the first few weeks, then transition to onsite once the office is built.
- Initial 6 months extendable contract.
- Employment setup: Independent Contractor.
- Open only for Saudi Nationals.
Role Overview
Seeking a Cybersecurity Governance, Risk & Compliance (GRC) Specialist to support and strengthen information security governance, risk management, compliance, and assurance programs.
The ideal candidate will have hands-on experience in cybersecurity policy development, security risk assessments, compliance management, and ISO-based audits and certifications.
Key Responsibilities
- Develop, review, and maintain cybersecurity policies, standards, procedures, and governance frameworks.
- Conduct information security risk assessments and support enterprise cybersecurity risk management initiatives.
- Ensure compliance with cybersecurity regulations, frameworks, and industry best practices.
- Support security assurance activities, control assessments, and compliance reviews.
- Lead and coordinate ISO 27001 audits, assessments, and certification activities.
- Identify security control gaps and drive remediation plans with relevant stakeholders.
- Monitor compliance against cybersecurity frameworks and standards.
- Prepare governance, risk, and compliance reports for leadership and regulatory requirements.
- Work closely with IT, security, and business teams to improve the organization's security posture.
Required Qualifications
- 1-2+ years of experience in Cybersecurity GRC, Information Security, Risk Management, or Compliance.
- Strong experience writing and maintaining security policies, standards, and procedures.
- Hands-on experience with cybersecurity risk assessments and risk registers.
- Experience supporting assurance, audit, and compliance activities.
- Proven experience with ISO 27001 audits and Information Security Management Systems (ISMS).
- Strong understanding of security controls, governance frameworks, and regulatory compliance requirements.
- Excellent stakeholder management and communication skills.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Socium - Teams Done Differently
SOC Manager
, KSA
Socium seeks a SOC Manager to oversee day-to-day security operations, incident response, SOC reporting, and process improvement for a Riyadh-based client. You will lead SOC analysts, maintain playbooks and SOPs, and ensu
Senior CyberArk Engineer
Abu Dhabi, UAE
The employer is seeking a senior engineer to lead enterprise CyberArk PAM architecture, implementation, operations, and security. Candidates need hands-on CyberArk expertise, the mandatory CyberArk CDE-PAM certification,
Principal AI Product Designer
Abu Dhabi, UAE
The employer seeks a principal-level designer to shape AI-powered digital products and lead design from discovery through launch. The role requires 8+ years in product or UX/UI design, 3+ years with complex or AI-powered
IT Service Transition & Mobilization Lead
Abu Dhabi, UAE
An IT infrastructure and managed services organization seeks a hands-on lead to assess existing environments and coordinate service transition, asset verification, and operational handover. Candidates need relevant IT se
Senior Database Administrator
, UAE
The employer seeks a Senior Database Administrator to maintain, secure, and optimize enterprise database environments and ensure availability, performance, and data integrity. Applicants need at least 8 years of database
Senior Network Engineer
Abu Dhabi, UAE
The employer is seeking a senior network engineer with at least eight years of enterprise networking experience. The role configures, secures, monitors, and troubleshoots network infrastructure, including routing, switch
Senior Backup & Storage Engineer
Abu Dhabi, UAE
The employer is seeking a senior backup and storage engineer with at least eight years of relevant experience. The role manages enterprise backup, storage, recovery, and disaster recovery infrastructure to protect data a
Penetration Tester
, KSA
Socium seeks a Penetration Tester for a 6-month extendable contract in Riyadh to conduct penetration testing and vulnerability assessments across networks, web applications, APIs, and infrastructure. The role involves ma
SOC Manager
, KSA
Senior CyberArk Engineer
Abu Dhabi, UAE
Principal AI Product Designer
Abu Dhabi, UAE
IT Service Transition & Mobilization Lead
Abu Dhabi, UAE
Senior Database Administrator
, UAE
Senior Network Engineer
Abu Dhabi, UAE
Senior Backup & Storage Engineer
Abu Dhabi, UAE
Penetration Tester
, KSA