Information Security Specialist

Role Overview

Information Security Governance

• Maintain and update the information security governance framework documentation, policy library, and associated standards and procedures.
• Draft and revise information security policies, standards, and baselines, ensuring alignment with regulatory requirements and business objectives.
• Monitor and track changes in legal, regulatory, and contractual requirements affecting information security (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating the compliance register.
• Maintain and update RACI matrices, governance committee documentation, and reporting packs.
• Coordinate security governance committee meetings, preparing agendas, minutes, and action tracking.
• Produce internal and external communication materials related to information security governance, policies, and programme updates.

Information Risk Management

• Execute information security risk assessments independently and produce complete risk registers with threats, vulnerabilities, likelihood, impact, and treatment plans.
• Maintain and update the information asset register, tracking asset owners, classifications, and risk profiles.
• Lead business impact assessment data collection activities with asset owners and business units.
• Conduct control effectiveness evaluations for key information security controls and escalate gaps.
• Coordinate third-party information security risk assessments, preparing questionnaires and reviewing vendor responses.
• Integrate risk and vulnerability data into procurement reviews, project onboarding, and change management.
• Prepare periodic risk reports for senior review.

Compliance & Programme Development

• Monitor compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, tracking control status and coordinating remediation.
• Coordinate internal and external audit activities, gathering evidence and tracking findings and remediation.
• Support preparation of regulatory submissions, self-assessments, and compliance attestations required by SAMA, NCA, and PCI Council.
• Maintain and enhance the security awareness programme, developing training materials and tracking completion metrics.
• Monitor KPIs and KRIs for the information security programme and prepare dashboards for senior management.
• Support integration of information security requirements into procurement, project management, and change control processes.

Cross-Functional & General GRC Support

• Maintain the information security policy, standard, and procedure library, managing version control, review cycles, and distribution.
• Support information security initiatives across business and technology teams, providing GRC subject matter expertise.
• Conduct information classification reviews and document security requirements for key business and IT projects.
• Deliver information security awareness sessions and materials to targeted staff groups.
• Provide analytical support for GRC team reporting, data gathering, and programme tracking.

Skills, Knowledge and Expertise

• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
• 1-3 years of professional experience in information security governance, risk management, compliance, or a closely related field.
• Hands-on experience with risk assessment execution, policy development, or compliance monitoring is required.
• Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC requirements is a strong advantage.
• Experience in a regulated fintech or banking environment is preferred.
• ISO 27001 Foundation or Lead Implementer is preferred.
• CompTIA Security+ or equivalent.
• Working toward CRISC or CISM.

Benefits

• International team of inspired professionals located all over the globe.
• Inclusive company culture embracing diversity, integrity, and transparency with work-life balance.
• 100% trust and freedom to apply your own vision and ideas from day one.
• Employee stock options programme available for everyone.
• Opportunity to learn and grow in one of the fastest growing fintech companies in the region.
• Relocation support and guidance through the process.
• Devices required for work are provided.