Cybersecurity GRC Specialist

Ninja· Governance, Risk & Compliance
Apply Now ↗
📍 Riyadh, Riyadh Province, Saudi ArabiaFull time

About this role

The Cybersecurity GRC Specialist will support cybersecurity governance, risk, and compliance activities across the Group. The role will focus on maintaining cybersecurity policies and controls, coordinating risk assessments and compliance evidence, tracking remediation actions, and supporting regulatory, audit, and assurance activities.

  • Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Risk Management, Business Administration, or a related field.
  • 2–4 years of experience in cybersecurity GRC, information security, risk, compliance, or a related function.
  • Good understanding of cybersecurity governance, risk assessment, control testing, and compliance.
  • Familiarity with Saudi cybersecurity requirements and information security frameworks.
  • Strong documentation, analytical, and stakeholder coordination skills.
  • Ability to communicate effectively with both technical and non-technical stakeholders.
  • Professional proficiency in Arabic and English.
  • Certifications such as ISO 27001, CRISC, CISA, CGRC, or equivalent are preferred.

Key Responsibilities

  • Support the development and maintenance of cybersecurity policies, standards, procedures, and governance records.
  • Coordinate cybersecurity risk assessments for systems, projects, suppliers, and business initiatives.
  • Maintain risk registers, track treatment plans, and follow up on overdue actions.
  • Support cybersecurity compliance assessments against regulatory and internal requirements.
  • Coordinate the collection, validation, and organization of compliance and audit evidence.
  • Support Internal Audit, external assessments, and regulatory reviews by preparing required cybersecurity evidence.
  • Track audit findings, remediation actions, and closure evidence.
  • Support cybersecurity due diligence and risk reviews for third parties and service providers.
  • Maintain security exceptions, risk acceptance records, and required follow-ups.
  • Prepare GRC reports, dashboards, and management updates.
  • Identify control gaps and opportunities to improve cybersecurity governance processes.

Frequently Asked Questions

Is the salary disclosed for the Cybersecurity GRC Specialist position at Ninja?
The salary for this Cybersecurity GRC Specialist role at Ninja is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Cybersecurity GRC Specialist position at Ninja located?
This Cybersecurity GRC Specialist role at Ninja is based in Riyadh, Riyadh Province, Saudi Arabia. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Cybersecurity GRC Specialist role at Ninja full-time or part-time?
This is listed as a Full time position. It is posted as a Cybersecurity GRC Specialist role in the Governance, Risk & Compliance department at Ninja.
Which team or department does the Cybersecurity GRC Specialist at Ninja belong to?
This Cybersecurity GRC Specialist position is part of the Governance, Risk & Compliance department at Ninja. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Cybersecurity GRC Specialist position at Ninja?
Click the "Apply Now" button on this page. You will be redirected to Ninja's official application portal hosted on workable where you can submit your application directly.
When was the Cybersecurity GRC Specialist job at Ninja posted?
This Cybersecurity GRC Specialist position at Ninja was posted on Oct 4, 2026. Apply as soon as possible — early applications are often reviewed first.
Cybersecurity GRC Specialist
Ninja
Apply for this role ↗

You'll be redirected to Ninja's official application page on workable.