csf

The Director of Information Security GRC will lead the design implementation and continuous improvement of the organization s governance risk and compliance programs across Saudi Arabia This role requires strategic oversight of multiple regulatory frameworks stakeholder engagement at board and executive levels and the leadership of a highperforming...

Location: Riyadh KSA Reporting to: CEO Our client is a rapidly growing fintech company empowering financial institutions and digital innovators across the MENA region. Through cutting-edge Open Finance infrastructure the company aims to enable seamless financial connectivity inclusion and continuous innovation across the ecosystem. We are now supporting...

Help AG is seeking a GRC Consultant to support governance, risk, and compliance initiatives, including risk assessments, compliance reviews, policy development, and ISO 27001 implementation.The role involves working with cybersecurity frameworks and regulatory requirements such as NCA ECC, SAMA CSF, and PDPL. You will collaborate with stakeholders to...

Jing Hau in Jeddah, Saudi Arabia is seeking a Security Analyst to help protect our systems and data. The role focuses on audits, threat monitoring, policy implementation, and incident response.Candidates should have a bachelor's in CS/IT, at least 3 years of experience, strong knowledge of firewalls and IDS/IPS, familiarity with ISO 27001 or NIST CSF, and...

SiFi, a fast-growing B2B FinTech in Riyadh, seeks a Cybersecurity GRC Specialist to oversee regulatory compliance, policy governance, and risk management. You will drive evidence management, audit readiness, and KPI/KRI reporting across frameworks.Responsibilities include maintaining SAMA CSF, PDPL/NDMO, and PCI-DSS compliance, mapping policies to controls,...

Tabby is seeking an Information Security Specialist (GRC) to independently drive governance, risk, and compliance across the organization’s information security program. You will work within the InfoSec GRC department in KSA, supporting policy development, risk assessments, audits, and regulatory submissions.The role requires a 1–3 year background in...

DS DeepSource is seeking a Senior IT Security Operations Architect to design and govern the security operations framework across enterprise hybrid infrastructure. You will align SIEM/SOAR, EDR/XDR, IAM, and CSPM tools with business goals and regulatory standards.You will lead architecture design, SOC workflows, and risk mitigation strategies, while ensuring...

SAB in Riyadh seeks an Information Security Risk Assessment Manager to lead enterprise-wide cybersecurity risk management, threat modeling, and risk methodology development. You will identify, assess, and manage information security risks across IT infrastructure, networks, and data with a strong focus on policy alignment.The role requires 3+ years in...

HALA is seeking an IT Audit Manager to lead risk-based audits across ITGC, cybersecurity, BCM, and technology-enabled processes in a dynamic fintech environment in Saudi Arabia. You will plan, execute, and report on audits, assess controls, and provide practical recommendations to strengthen governance and cyber resilience.The role emphasizes independent...

Qiddiya is seeking an experienced Cybersecurity Architect to design and maintain enterprise security architectures, embed security throughout the project lifecycle, and lead risk assessments. The role collaborates with multiple teams to implement security-by-design and ensure compliance with NCA ECC, NIST CSF, ISO 27001, and CIS Controls.Candidates should...

Role OverviewThe Cybersecurity GRC Specialist plays a critical role in maintaining SiFiu2019s cybersecurity compliance posture and ensuring audit readiness across all regulatory frameworksThis role is responsible for managing the full Governance Regular and Compliance GRC lifecycle including evidence management policy governance risk tracking and KPI KRI...

SiFi in Saudi Arabia seeks a Cybersecurity GRC Specialist to maintain regulatory compliance posture and ensure audit readiness across frameworks. You will manage the full GRC lifecycle including evidence management, policy governance, risk tracking, and KPI/KRI reporting, ensuring controls are measurable and defensible.Ideal candidates have 1-3 years in a...

مرنة للتمويل is seeking a GRC Senior Specialist to establish and run governance, risk, and compliance for the cybersecurity function, ensuring policies and controls meet SAMA CSF, NCA, and other frameworks. You will design KPIs, monitor risks, and coordinate audits to support secure operations.Ideal candidates have a bachelor’s degree in a...

Job DescriptionAbout SiFiSiFi is a fast-growing B2B FinTech company specializing in spend management and card issuance solutions. We help companies take control of their spending, streamline expense workflows, and operate with greater efficiency.Role OverviewThe Cybersecurity GRC Specialist plays a critical role in maintaining SiFi's cybersecurity compliance...

Tabby is seeking an Information Security Specialist (GRC) to join the InfoSec GRC team in KSA. The role will independently execute governance, risk, and compliance activities across Tabby’s information security programme.You will work on governance frameworks, risk assessments, regulatory tracking (SAMA CSF, PDPL, NCA ECC, PCI-DSS), and reporting. 1–3...

Tabby is seeking an Information Security governance and risk professional to lead the development and maintenance of security policy frameworks, risk registers, and compliance programs. You will drive GRC initiatives and coordinate with stakeholders to ensure alignment with industry standards and regulatory requirements.The role focuses on governance, risk...

The Senior IT Security Operations Architect designs builds and governs the overarching security operations framework SOC architecture and threat mitigation strategies across enterprise hybrid infrastructure This strategic and technical role aligns operational security systems SIEM SOAR EDR IAM Network Defense with business goals cloud environments and...

Tabby is seeking an Information Security Specialist (GRC) to independently drive governance, risk, and compliance activities across Tabby's information security programme in KSA. The role focuses on building and maintaining policy libraries, conducting risk assessments, and coordinating audits and regulatory submissions, with emphasis on SAMA CSF, PDPL, NCA...

About the Company : GRC Senior Specialist About the Role Establish and run the governance, risk, and compliance activities of the cybersecurity function, ensuring policies, controls, and regulatory obligations under SAMA CSF, NCA are documented, implemented, monitored, and reported. Responsibilities Develop, documents, and maintain cybersecurity policies,...

**Job Summary – Cybersecurity Risk Assessor** **The Cybersecurity Risk Assessor is responsible for identifying, assessing, and managing cybersecurity risks in line with SAMA CSF requirements. The role involves conducting various cyber risk assessments, reviewing security controls, and ensuring cybersecurity considerations are integrated into...