GRC Specialist (Information Security, Privacy and Business Continuity)

We are seeking an experienced GRC Specialist to support the implementation and day-to-day operations of Information Security, Privacy, Business Continuity, Risk Management, Compliance, Internal Audit Coordination, Vendor Risk Management, and GRC platform activities. The ideal candidate will be responsible for monitoring compliance, maintaining governance records, coordinating assessments and audits, managing risk and compliance registers, and preparing management reports and dashboards.

Key Responsibilities

• Support the operation and continuous improvement of Information Security, Privacy, Business Continuity, and Compliance programs.
• Maintain risk registers, compliance registers, audit trackers, and governance documentation.
• Coordinate and track ISO 27001, ISO 22301, PDPL, and regulatory compliance initiatives.
• Conduct vendor security, privacy, and business continuity assessments and track remediation activities.
• Coordinate audit requests, evidence collection, findings management, and corrective action follow-up.
• Maintain ROPA, DPIA, privacy incident, BIA, BCP, and Disaster Recovery records.
• Support administration of GRC platforms, including user management, workflows, dashboards, and reporting.
• Prepare monthly and quarterly reports, KPIs, dashboards, and management presentations.
• Deliver information security, privacy, and business continuity awareness activities and training sessions.
• Monitor risks, findings, issues, and action plans and ensure timely closure through stakeholder coordination.

Requirements

• 5+ years of experience in Information Security, GRC, Risk Management, Compliance, Privacy, Business Continuity, or related fields.
• Experience supporting ISO 27001, ISO 22301, and PDPL compliance initiatives.
• Experience maintaining risk registers, compliance registers, and governance documentation.
• Hands-on experience coordinating audits, assessments, and evidence management activities.
• Experience conducting vendor risk and third-party assessments.
• Experience working with GRC tools/platforms and management reporting dashboards.
• Strong communication, stakeholder management, and documentation skills.
• Fluent in English and Arabic.

Preferred Certifications

• CISSP
• CISM
• CRISC
• CGRC
• ISO 27001 Lead Implementer / Lead Auditor
• ISO 22301 Lead Implementer / Lead Auditor
• CIPM
• CIPP
• CDPSE
• CBCI