Technology Risk GRC Lead

📋 Description

• Support end-to-end SAMA inspection readiness and evidence coordination.
• Lead compliance assessments for SAMA CSF, NCA, PCI-DSS, PDPL.
• Govern cyber security policies, standards, and procedures lifecycle.
• Maintain mappings and control inventories across frameworks.
• Coordinate with Technology, Engineering, IT Ops on remediation.
• Produce GRC dashboards and KPI reporting for leadership.

🎯 Requirements

• 4–6 years in Cyber Security GRC, Tech Risk, IT Governance, or IT Audit.
• Experience with regulatory frameworks, esp SAMA CSF (required) and NCA.
• Strong governance, policy lifecycle, and control assessment knowledge.
• Experience with regulatory inspections, assessments, and maturity evaluations.
• Remediation program management and cross-stakeholder coordination.
• Strong documentation and reporting for technical and executive audiences.