Cybersecurity Governance, Risk & Compliance (GRC) SpecialistCCDS · Eastern Province, Riyadh, Riyadh Province, Saudi Arabia

Cybersecurity Governance, Risk & Compliance (GRC) Specialist

🗓️ Posted 2026-08-27 Eastern Province, Riyadh, Riyadh Province, Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 12,000–SAR 18,000/mo

About the Company

Providing a higher level of personal service since 1964. Welcome We're serving you with a higher level of personal service, including personal, private, business and commercial banking, home mortgages, and investment and wealth management. We're located in Omaha, NE; Council Bluffs and West Des Moines, IA; and Dallas, TX, providing employees with great opportunities for career growth. What's our culture like It's a culture of individuals who care about each other's success, working together as one company. Visit our LinkedIn news feed and Facebook page to get a glimpse of what it's like to work at Security National Bank. We also invite you to visit our careers page to learn more about our work perks. You'll find a positive difference working for a family-owned community bank with the reach and resources of many larger competitors yet remaining connected to our local community and businesses with a commitment to our most important asset, our people. Equal Housing Lender Member FDIC Equal Opportunity Employer NMLS 402531 Banking Specialties: Business Banking, Wealth Management, Consumer Banking, Mortgage Lending, Commercial Banking, Private Client Services, Trust Services

Responsibilities

  • ● Contract/engagement: Project-based managed cybersecurity services (13-month)
  • ● Minimum experience: 6+ years
  • ● Role Purpose
  • ● Support the governmental entity's cybersecurity governance, enterprise risk, regulatory compliance, audit readiness, and executive reporting activities.
  • ● Key Responsibilities
  • ● Review and periodically update cybersecurity policies, procedures, standards, and guidelines.
  • ● Perform cybersecurity risk assessments covering assets, systems, projects, and third parties.
  • ● Maintain the cybersecurity risk register, develop treatment plans, track actions, and align decisions with the entity's approved risk appetite.
  • ● Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other applicable national or international frameworks.
  • ● Support internal and external audits, prepare evidence, manage non-compliance cases, and follow remediation through closure.
  • ● Operate or support eGRC and cybersecurity risk-management tools.
  • ● Prepare management reports, executive dashboards, KPIs, compliance status reports, and committee-level presentations.
  • ● Technical and Professional Requirements
  • ● Bachelor's degree in Computer Science, Information Security, or a related field.
  • ● At least 6 years of experience in cybersecurity governance, risk, and compliance.
  • ● Advanced knowledge of Saudi and international cybersecurity frameworks and standards, including NCA controls and ISO/IEC 27001.
  • ● Proven experience with cybersecurity risk registers, treatment plans, third-party risk, executive reporting, and eGRC tools.
  • ● Personal Requirements
  • ● Strong stakeholder-management skills and confidence working with senior leadership.