Role Summary
The GRC Senior Specialist provides governance, risk management and compliance consultancy to Saudi Motorsport Company. The role owns the cybersecurity governance framework and keeps SMC compliant with NCA and other Saudi regulations.
Key Responsibilities
- Develop, review and maintain cybersecurity policies, standards and procedures
- Lead compliance with NCA ECC, CCC, and other applicable frameworks (PDPL, ISO 27001)
- Run gap assessments and build remediation roadmaps with control owners
- Own the cybersecurity risk register: identify, assess, treat and report risks
- Conduct third-party and vendor risk assessments
- Prepare SMC for internal, external and NCA audits, and manage evidence collection
- Track compliance status and present risk and compliance reports to senior management
- Support business continuity and disaster recovery planning from a security angle
- Run security awareness programs and policy communication across the organization
- Advise business and IT teams on regulatory and security requirements for new projects
Requirements
Requirements
- Bachelor's degree in Cybersecurity, Information Systems, IT or related field
- 7+ years in cybersecurity GRC, with at least 3 years in KSA
- Proven hands-on experience implementing NCA ECC and CCC, including NCA self-assessments
- Strong knowledge of ISO 27001, ISO 31000, NIST CSF and the Saudi PDPL
- Experience writing policies and leading audits end to end
- Familiarity with GRC platforms (ServiceNow IRM/GRC, RSA Archer, MetricStream) is a plus
- Saudi national, fluent in Arabic and English, with strong report writing skills
Preferred Certifications
CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer or Lead Auditor