Governance, Risk & Compliance specialist at Naseej

Riyadh, Riyadh Region, Saudi Arabia -

Full Time

Start Date

Immediate

Expiry Date

22 Sep, 26

Salary

0.0

Posted On

24 Jun, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Risk Assessment, GRC, Compliance Monitoring, Risk Register Management, NCA Framework, SAMA Framework, ISO 27001, Audit Support, Risk Mitigation, Governance

Industry

Real Estate

Description

Company Description: Naseej is a leading technology company committed to harnessing the power of digital transformation in learning & knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech & Digital transformation. Naseej website: https://www.naseej.com/ Job Summary: This role is responsible for identifying, assessing, and managing cybersecurity risks for a project within the Saudi Ministry of Commerce. It supports the implementation of risk management processes, maintains risk registers, and ensures compliance with applicable regulatory and industry frameworks such as NCA, SAMA, and ISO 27001. Key Responsibilities: Conduct cybersecurity risk assessments to identify, evaluate, and document risks, threats, vulnerabilities, and control gaps. Maintain and update risk registers, ensuring risks are accurately tracked, monitored, and reported. Support the development, implementation, and monitoring of risk treatment and mitigation plans to reduce project and organizational risk exposure. Prepare periodic risk reports and dashboards, and coordinate with stakeholders to ensure timely remediation of identified risks. Ensure alignment with the cybersecurity and regulatory requirements applicable to the Saudi Ministry of Commerce project. Assist in ensuring compliance with cybersecurity regulatory requirements and standards, including NCA, SAMA, and ISO 27001. Support internal and external audits, compliance assessments, and risk-related governance activities. Requirements: Saudi National Bachelor’s degree in Cybersecurity, Information Security, or a related field 3–5 years of practical experience in cybersecurity compliance or GRC

Responsibilities

The role involves identifying and managing cybersecurity risks for a Saudi Ministry of Commerce project. It focuses on maintaining risk registers and ensuring compliance with NCA, SAMA, and ISO 27001 standards.