Gentis SA

A leading organization in Saudi Arabia is seeking a Cybersecurity Compliance Officer to join their GRC team. The role focuses on developing and maintaining security governance frameworks, policies, and procedures to ensure alignment with regulatory requirements. The candidate will drive compliance with national cybersecurity regulations, data protection laws, and international security standards. Key responsibilities include monitoring regulatory compliance, conducting internal security assessments, managing GRC technology platforms, and coordinating external audit engagements. The position requires regular reporting to GRC leadership and supporting organizational certification initiatives. The ideal candidate will have experience in implementing and maintaining comprehensive security compliance programs while ensuring adherence to industry and regulatory requirements. Detailed Responsibilities:<ul class="PlaygroundEditorTheme__ul"><li value="1" class="PlaygroundEditorTheme__listItem">Develop and maintain comprehensive cybersecurity governance frameworks, policies, and procedures ensuring alignment with regulatory requirements, including NCA controls.</li><li value="2" class="PlaygroundEditorTheme__listItem">Drive compliance with key security standards and regulations including PDPL, ISO 27001, and other applicable frameworks. Monitor and implement emerging requirements.</li><li value="3" class="PlaygroundEditorTheme__listItem">Perform technical security reviews of system configurations, network architecture, and control implementations to validate compliance and security best practices.</li><li value="4" class="PlaygroundEditorTheme__listItem">Lead internal security assessments and compliance reviews to identify and remediate control gaps.</li><li value="5" class="PlaygroundEditorTheme__listItem">Implement and administer GRC automation platforms to enhance compliance monitoring efficiency and reporting capabilities.</li><li value="6" class="PlaygroundEditorTheme__listItem">Design and oversee control attestation procedures, working with control owners to validate and document control effectiveness.</li><li value="7" class="PlaygroundEditorTheme__listItem">Develop and execute third-party security assessment program to evaluate and monitor vendor security practices.</li><li value="8" class="PlaygroundEditorTheme__listItem">Generate regular security status reports for GRC management. Effectively communicate security risks, issues and recommendations to key stakeholders.</li><li value="9" class="PlaygroundEditorTheme__listItem">Manage external audit engagements and certification processes to ensure successful outcomes and continued compliance.</li></ul>

Security Engineer

Network / Infrastructure / Security

English

Key Competencies:<ul class="PlaygroundEditorTheme__ul"><li value="1" class="PlaygroundEditorTheme__listItem">Information Security Governance: Advanced knowledge of security frameworks, policies, and strategic integration of security with business operations. Strong understanding of cyber resilience principles.</li><li value="2" class="PlaygroundEditorTheme__listItem">Regulatory &amp; Standards Expertise: Comprehensive understanding of data protection laws, international security standards (ISO), and industry regulations. Ability to interpret and apply evolving requirements.</li><li value="3" class="PlaygroundEditorTheme__listItem">Technical Security Knowledge: Proficiency in assessing system security configurations, network architecture, and control implementations. Deep understanding of security best practices.</li><li value="4" class="PlaygroundEditorTheme__listItem">Security Assessment: Expert capability in conducting security assessments and compliance reviews. Strong analytical skills in control effectiveness evaluation.</li><li value="5" class="PlaygroundEditorTheme__listItem">GRC Technology: Advanced knowledge of GRC platforms and automation solutions. Expertise in optimizing compliance monitoring and reporting processes.</li><li value="6" class="PlaygroundEditorTheme__listItem">Control Framework: Deep understanding of control validation procedures and attestation processes. Knowledge of control documentation best practices.</li><li value="7" class="PlaygroundEditorTheme__listItem">Third-Party Security: Expert knowledge of vendor security assessment methodologies and supply chain risk management principles.</li><li value="8" class="PlaygroundEditorTheme__listItem">Strategic Communication: Strong ability to articulate complex security concepts to various stakeholders. Excellence in security status reporting and presentation.</li><li value="9" class="PlaygroundEditorTheme__listItem">Audit Management: In-depth knowledge of external audit and certification processes. Strong understanding of audit evidence requirements and remediation approaches.</li><li value="10" class="PlaygroundEditorTheme__listItem">Policy Architecture: Expert understanding of control frameworks and their relationship to organizational policies. Proficiency in mapping security requirements to operational controls.</li></ul> Core Responsibilities:<ul class="PlaygroundEditorTheme__ul"><li value="1" class="PlaygroundEditorTheme__listItem">Information Security Governance: Develop and oversee security frameworks, policies, and procedures aligned with business objectives. Integrate security strategy with operations to maintain business continuity and cyber resilience.</li><li value="2" class="PlaygroundEditorTheme__listItem">Regulatory &amp; Standards Management: Ensure adherence to data protection laws, international security standards (ISO), and industry regulations. Monitor evolving requirements and update security practices accordingly.</li><li value="3" class="PlaygroundEditorTheme__listItem">Technical Security Oversight: Assess and validate system security configurations, network architecture, and control implementations against security requirements and industry best practices.</li><li value="4" class="PlaygroundEditorTheme__listItem">Security Assurance: Lead internal security assessments and compliance reviews. Evaluate control effectiveness and drive continuous improvement initiatives.</li><li value="5" class="PlaygroundEditorTheme__listItem">Technology &amp; Process Optimization: Implement and manage GRC platforms and automation solutions to enhance compliance monitoring and reporting efficiency.</li><li value="6" class="PlaygroundEditorTheme__listItem">Control Management: Design and maintain control validation procedures, ensuring proper documentation and attestation from control owners.</li><li value="7" class="PlaygroundEditorTheme__listItem">Third-Party Risk Management: Develop and execute vendor security assessment programs. Evaluate and monitor external partner security postures to manage supply chain risks.</li><li value="8" class="PlaygroundEditorTheme__listItem">Stakeholder Management: Deliver regular status updates to GRC leadership on security posture and program effectiveness. Drive clear communication channels with key stakeholders.</li><li value="9" class="PlaygroundEditorTheme__listItem">Audit Coordination: Support external audit engagements and certification processes. Partner with auditors and internal teams to facilitate successful outcomes.</li><li value="10" class="PlaygroundEditorTheme__listItem">Policy Framework Administration: Maintain unified control framework mapping security requirements to organizational policies. Establish clear relationships between policies, standards, and operational controls.</li></ul> Education &amp; Professional Certifications: · Advanced degree in Computing/Technology field (Bachelor's/Master's in Computer Science or related)· Governance, Risk &amp; Compliance certification (ISC2 GRC)· CISSP (Certified Information Security Professional)· CISA (Certified Information Systems Auditor)· Security Controls Framework certification (SANS SEC566)· OSCP (Offensive Security Certified Professional)

By submitting your email address, CV, and any other personal information, you consent to such information being collected, held, used and disclosed in accordance with our privacy policy  : [https://www.gentis.com/en/privacy-policy](https://www.gentis.com/en/privacy-policy) 

Privacy Policy

Gentis

ISC2

Certified Information Systems Security Professional (CISSP)

cisa

SANS SEC566

OSCP

Governance Risk Compliance

PDPL

ISO 27001

National Cybsecurity Authority

Security Solution Analyst - GRC Cybersecurity

https://hireme-live-api-data.s3.amazonaws.com/cms/71cac45f-fa71-46b2-83ce-4c3e2d9ffe5e/cms-f8a4cd2c-3993-42df-98e9-9568bc6cc412.jpg

Oops! It looks like you've already applied for <mission_title>.

Already Applied

Your bid for <mission_title> has been submitted.

Congratulations!

Sign in

By submitting this form, Bring to the table win-win survival strategies to ensure proactive domination

Sign up

Project application

Didn’t receive the email?

Thank you for applying for the project <mission_title>. We’ve sent you an email to confirm you application.

The input does not match a phone number format

No account yet? Fill the form below to complete your application

Any questions about your privacy? <a target="_blank" href="mailto:hello@wiggli.io" rel="noreferrer">Contact us</a>

Please select the language in which you'd like to see it!

This Job description is in a different language from the one in which you're currently viewing this page

It appears that currently, we don't have opportunities that match your search criteria

To add skills, start by selecting a category, using the dropdown in the upper left corner

Simply upload CV, and our smart system will automatically fill in the remaining required fields.

You can now follow the evolution of your application through our ATS. All future interviews will be organised through our platform, so keep an eye on it.


Your application has been submitted to #! click the link below to view it

You can't apply on wiggly with this email address as it is linked to a # account.

Are you sure you'd like to delete # version?

Is # your correct email without typos? If not, you can restart the application process

Click here to resend the email. Still having trouble?

If you wish to apply anyway, just use the form below to submit your application using another email address.

You're trying to apply for a vacancy with a # account

Security Solution Analyst - GRC Cybersecurity

Job application

CV document

Upload a .doc, .docx, or pdf file