Cybersecurity Senior Specialist - GRC

About this opportunity

Cybersecurity Senior Specialist – GRC (Energy/Power) Location: Jazan, Saudi Arabia Industry: Energy, Gasification & Power Department: Cybersecurity Experience: 5–6 years Employment Type: Full-time Languages: fluent in Arabic & English About the Role Our client, a leading organization in the energy, gasification and power sector, is seeking an experienced Cybersecurity Senior Specialist – GRC to join its Cybersecurity team in Jazan, Saudi Arabia. The successful candidate will support the development and implementation of cybersecurity governance, risk and compliance frameworks, ensuring that IT, IS and OT environments remain secure and compliant with applicable regulatory requirements. Key Responsibilities Develop, review and maintain cybersecurity policies, strategies, procedures and standards covering IT, IS and OT environments. Conduct cybersecurity risk assessments and compliance audits, prepare reports and ensure findings are tracked through to closure. Assess and manage third-party cybersecurity risks associated with contractors, suppliers, vendors and other external parties. Develop, maintain and regularly update the organization’s cybersecurity risk register and associated mitigation plans. Support cybersecurity awareness programmes, including training and phishing simulations. Collect and analyse threat intelligence to strengthen organizational cybersecurity preparedness. Assist with implementing and reviewing data security and privacy controls to meet corporate and regulatory requirements. Participate in cybersecurity incident response, including preparation of incident reports and recommendations to prevent recurrence. Prepare KPI and management reports to monitor the effectiveness of cybersecurity controls. Provide guidance and mentoring to junior team members in cybersecurity GRC activities. Work closely with Cybersecurity, IT/OT, Internal Audit, Supply Chain, HR, EHSS, contractors, suppliers and consultants. Requirements Bachelor’s degree in Cybersecurity, Information Security, Computer Science or an equivalent discipline. Fluent in English & Arabic 5–6 years’ experience in IT GRC, Cybersecurity GRC or Information Security. Proven experience developing cybersecurity policies, procedures and standards. Experience conducting risk and compliance assessments and audits. Strong understanding of cybersecurity risks and corresponding controls. Knowledge of IT/OT cybersecurity trends, techniques and operational environments. Strong knowledge of Saudi Arabia cybersecurity regulations, particularly HCIS and NCA requirements. Excellent written and verbal communication skills. Strong analytical, problem-solving and interpersonal skills. Ability to work effectively as part of a multidisciplinary team. Desirable Certifications Relevant certifications may include: CISA – Certified Information Systems Auditor CRISC – Certified in Risk and Information Systems Control CISM – Certified Information Security Manager CISSP – Certified Information Systems Security Professional Security+ SSCP CEH GIAC ISO 27001 Lead Implementer / Lead Auditor ITIL NIST Cybersecurity Framework certification Working Conditions Based in Jazan, Saudi Arabia Primarily office-based role with interaction across IT, OT and business functions Apply If you are an experienced Cybersecurity GRC professional with strong knowledge of Saudi cybersecurity regulations and experience within an energy, industrial, gasification, power or similar critical-infrastructure environment, we would like to hear from you. Please submit your CV, including relevant cybersecurity certifications and experience. Application Question(s): * Are you fluent in both Arabic and English for professional communication and reporting? Work Location: In person