GRC Expert (3 Months Contract)

Job Overview:We are seeking a highly skilled and experienced GRC (Governance, Risk, and Compliance) Expert with in-depth knowledge of NCA (National Cybersecurity Authority) and SAMA (Saudi Arabian Monetary Authority) technical standards and regulations. The ideal candidate should have substantial experience in the Saudi banking industry and be adept at ensuring compliance with local regulatory requirements. Key Responsibilities:Develop, implement, and maintain GRC frameworks and strategies in alignment with NCA and SAMA regulations.Conduct risk assessments and compliance audits to identify gaps and areas for improvement.Ensure that all cybersecurity practices comply with NCA and SAMA requirements.Provide guidance and support on regulatory compliance issues related to cybersecurity and risk management.Monitor and report on compliance status, including creating detailed reports for senior management and regulatory bodies.Collaborate with various departments to ensure integrated risk management and compliance practices.Stay updated with the latest regulations, standards, and best practices related to NCA and SAMA.Lead the development of policies, procedures, and controls to support compliance and risk management efforts.Conduct training and awareness programs for employees on compliance and risk management topics.Support incident response activities, ensuring adherence to regulatory requirements and effective mitigation strategies. Qualifications:Bachelor’s degree in Information Security, Risk Management, Computer Science, or a related field. A Master’s degree is a plus.4 to 6 years of experience in GRC roles within the banking sector in Saudi Arabia.Strong understanding of NCA and SAMA regulations and technical standards.Proven experience in conducting risk assessments, compliance audits, and developing GRC frameworks.Excellent knowledge of cybersecurity principles and practices.Strong analytical and problem-solving skills.Excellent communication and interpersonal skills.Professional certifications such as CRISC, CISA, CISSP, or similar are highly desirable.