GRC Specialist (Information Security, Privacy and Business Continuity)

We are seeking an experienced GRC Specialist to support the implementation and day-to-day operations of Information Security, Privacy, Business Continuity, Risk Management, Compliance, Internal Audit Coordination, Vendor Risk Management, and GRC platform activities. The ideal candidate will be responsible for monitoring compliance, maintaining governance records, coordinating assessments and audits, managing risk and compliance registers, and preparing management reports and dashboards.Key ResponsibilitiesSupport the operation and continuous improvement of Information Security, Privacy, Business Continuity, and Compliance programsMaintain risk registers, compliance registers, audit trackers, and governance documentationCoordinate and track ISO 27001, ISO 22301, PDPL, and regulatory compliance initiativesConduct vendor security, privacy, and business continuity assessments and track remediation activitiesCoordinate audit requests, evidence collection, findings management, and corrective action follow-upMaintain ROPA, DPIA, privacy incident, BIA, BCP, and Disaster Recovery recordsSupport administration of GRC platforms, including user management, workflows, dashboards, and reportingPrepare monthly and quarterly reports, KPIs, dashboards, and management presentationsDeliver information security, privacy, and business continuity awareness activities and training sessionsMonitor risks, findings, issues, and action plans and ensure timely closure through stakeholder coordinationRequirements5+ years of experience in Information Security, GRC, Risk Management, Compliance, Privacy, Business Continuity, or related fieldsExperience supporting ISO 27001, ISO 22301, and PDPL compliance initiativesExperience maintaining risk registers, compliance registers, and governance documentationHands-on experience coordinating audits, assessments, and evidence management activitiesExperience conducting vendor risk and third-party assessmentsExperience working with GRC tools/platforms and management reporting dashboardsStrong communication, stakeholder management, and documentation skillsFluent in English and ArabicPreferred CertificationsCISSPCISMCRISCCGRCISO 27001 Lead Implementer / Lead AuditorISO 22301 Lead Implementer / Lead AuditorCIPMCIPPCDPSECBCI