Cybersecurity Specialist - GRC
Confidential Company
4–9 years of experience
Job description
Job Description: Cyber Risk Assessment Specialist
Department: Cybersecurity
Location: Kingdom of Saudi Arabia (KSA)
Experience: 4–7 Years
Employment Type: Full-Time
The Cyber Risk Assessment Specialist is responsible for identifying, analyzing, and evaluating cybersecurity risks across the organization’s IT, cloud, and operational environments. This role ensures that risks are properly quantified, documented, and communicated to support informed business decisions and strengthen the overall security posture. The ideal candidate will have strong experience in risk methodologies and frameworks such as NIST Cybersecurity Framework, ISO 27005, ISO27001 as well as global best practices and regulatory alignment with NCA ECC.
Bachelor’s degree in Cybersecurity, IT, Risk Management, or related field.
4–7 years of experience in cybersecurity risk assessment or GRC roles.
Strong understanding of:
- NIST Cybersecurity Framework
- ISO 27005
- NCA ECC
Preferred Certifications
- Certified in Risk and Information Systems Control (CRISC)
- Certified Information Security Manager (CISM)
- ISO 27005 Risk Manager Certification
- Certified Information Systems Security Professional (CISSP)