Job Details
Experience Needed:
Career Level:
Education Level:
Salary:
Job Categories:
Skills And Tools:
Job Description
- Keeps ISMS documentation, processes, and records up to date and audit-ready
- Lead internal audits, compliance checks, and management reviews
- Be our star player during ISO 27001 audits (prep, evidence, responses – you own it!
- Perform risk assessments across assets, vendors, and projects and maintain our risk register
- Manage the lifecycle of nonconformities, corrective actions, and improvement efforts
- Maintain and review the Statement of Applicability (SoA) and ensure Annex A controls are in place
- Ensure we stay aligned with national cybersecurity standards like NCA ECC and SAMA
- Keep our policies fresh, aligned, and accessible to the people who need them
- Monitor GRC metrics and share smart, clear reports with leadership
- Awareness & training campaigns to grow our culture of security
Job Requirements
- Bachelor’s degree in information security, Computer Science, or a related field
- 2–5 years of experience in GRC, ISMS operations, information security, or compliance
- Practical, hands-on experience with ISO/IEC 27001 (especially audits & certification maintenance)
- Familiarity with risk management frameworks and ITIL
- Bonus points for experience with GRC or ISMS platforms
- Experience with awareness/training platforms
- ISO 27001 Lead Implementer or Lead Auditor highly preferred
- GRCA or GRCP are a definite plus!