GRC Cyber security (2373)

About 2P

Role Overview

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks.
• Define and monitor cybersecurity KPIs and governance performance indicators.
• Conduct cybersecurity risk assessments and maintain organizational risk registers.
• Develop and follow up on risk treatment plans and mitigation actions.
• Assess cybersecurity compliance against applicable regulatory and industry requirements.
• Support compliance with NCA ECC, NCA DCC, NCA CCC, NCA TCC, CST CRF, and ISO/IEC 27001.
• Conduct compliance assessments, identify gaps, and support remediation plans.
• Support Business Impact Analysis activities.
• Develop, maintain, and test Business Continuity Plans.
• Participate in periodic BCP testing and continuity exercises.
• Develop and execute cybersecurity awareness campaigns and coordinate phishing simulation exercises.
• Prepare governance, risk, compliance, and awareness reports for management and coordinate with stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• 3-5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions.
• Strong experience in cybersecurity governance, including policies, procedures, standards, strategies, and KPI development.
• Hands-on experience in cybersecurity risk management, including risk assessments, risk registers, and risk treatment.
• Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements.
• Familiarity with ISO/IEC 27001 and cybersecurity compliance practices.
• Experience in business continuity, BIA, BCP development, and BCP testing.
• Experience in cybersecurity awareness programs and phishing simulations.
• Arabic speaker.
• Strong analytical, documentation, communication, and stakeholder-management skills.

Preferred Certifications

• CompTIA Security+
• CISA - Certified Information Systems Auditor
• CRISC - Certified in Risk and Information Systems Control
• CISM - Certified Information Security Manager
• CISSP - Certified Information Systems Security Professional