Cyber Security Engineer (GRC)

Cyber Security Engineer Experience: 1–3 YearsWork Location: OnsiteEmployment Type: Full-TimeWe are seeking a Cyber Security Engineer to provide hands-on support to the IT Governance function. The role will assist with cybersecurity governance, policy management, audit coordination, compliance tracking, documentation, reporting, and day-to-day governance activities.Key ResponsibilitiesSupport the development, maintenance, and periodic review of IT and cybersecurity policies, standards, and procedures.Assist with cybersecurity audits, assessments, and regulatory compliance activities.Coordinate audit requirements, evidence collection, follow-ups, and closure of observations.Track compliance against applicable cybersecurity frameworks, policies, and regulatory requirements.Maintain governance documentation, registers, records, and compliance trackers.Assist in monitoring remediation activities and follow up with relevant stakeholders.Prepare governance reports, dashboards, presentations, and management updates.Support risk assessments and documentation of cybersecurity risks and control gaps.Maintain records of policies, exceptions, controls, audit findings, and remediation actions.Coordinate with cybersecurity, IT infrastructure, risk, compliance, and business teams on governance activities.Support continuous improvement of cybersecurity governance processes and controls.Required Skills & QualificationsBachelor’s degree in Cybersecurity, Computer Science, IT, Risk Management, or a related field.1–3 years of experience in cybersecurity, IT governance, GRC, risk, compliance, or audit support.Basic understanding of cybersecurity frameworks, policies, controls, and regulatory requirements.Familiarity with frameworks such as ISO 27001, NIST, SAMA, or equivalent is preferred.Strong documentation, reporting, coordination, and organizational skills.Good knowledge of MS Excel, PowerPoint, Word, and reporting tools.Strong attention to detail and ability to manage multiple governance activities.Relevant GRC, cybersecurity, audit, or compliance certifications are an advantage.