Cybersecurity GRC Specialist
Socium - Teams Done Differently · Riyadh, Saudi Arabia
Tailor my CV for this job — freeThe ideal candidate will have hands-on experience in cybersecurity policy development, security risk assessments, compliance management, and ISO-based audits and certifications.Key ResponsibilitiesDevelop, review, and maintain cybersecurity policies, standards, procedures, and governance frameworks.Conduct information security risk assessments and support enterprise cybersecurity risk management initiatives.Ensure compliance with cybersecurity regulations, frameworks, and industry best practices.Support security assurance activities, control assessments, and compliance reviews.Lead and coordinate ISO 27001 audits, assessments, and certification activities.Identify security control gaps and drive remediation plans with relevant stakeholders.Monitor compliance against cybersecurity frameworks and standards.Prepare governance, risk, and compliance reports for leadership and regulatory requirements.Work closely with IT, security, and business teams to improve the organization's security posture.Required Qualifications1-2+ years of experience in Cybersecurity GRC, Information Security, Risk Management, or Compliance.Strong experience writing and maintaining security policies, standards, and procedures.Hands-on experience with cybersecurity risk assessments and risk registers.Experience supporting assurance, audit, and compliance activities.Proven experience with ISO 27001 audits and Information Security Management Systems (ISMS).Strong understanding of security controls, governance frameworks, and regulatory compliance requirements.Excellent stakeholder management and communication skills.