Job summary
Senior GRC Specialist role at Müller`s Solutions in Riyadh supporting Saudi Motorsport Company. The specialist will own cybersecurity governance, ensure compliance with NCA and Saudi regulations, and manage risk, audits and policy programs.
Key responsibilities
- Develop and maintain cybersecurity policies, standards and procedures
- Lead compliance with NCA ECC, CCC and other applicable frameworks
- Perform gap assessments and create remediation roadmaps with control owners
- Manage the cybersecurity risk register: identify, assess, treat and report risks
- Conduct third-party and vendor risk assessments
- Prepare for internal, external and NCA audits and manage evidence collection
- Report compliance status and risk findings to senior management
- Support business continuity and disaster recovery planning from a security perspective
Requirements
- Bachelor's degree in Cybersecurity, Information Systems, IT or related field
- 7+ years in cybersecurity GRC, including at least 3 years in KSA
- Hands-on experience implementing NCA ECC and CCC and performing NCA self-assessments
- Strong knowledge of ISO 27001, ISO 31000, NIST CSF and Saudi PDPL
- Experience writing policies and leading end-to-end audits
- Familiarity with GRC platforms (ServiceNow IRM/GRC, RSA Archer, MetricStream) is a plus
- Saudi national, fluent in Arabic and English, strong report writing skills
Skills
NCA ECCNCA CCCPDPLISO 27001ISO 31000NIST CSFGRC platformsRisk assessmentAudit managementPolicy writing
Source: Workable. Last checked as open: 13 Nov 2026. You apply directly with the employer.
Apply now
