AA Consultant Group تعلن عن وظيفة أخصائي أمن سيبراني في السعودية

Position Overview

We are looking for a GRC Security Specialist to join our Cyber Security Services (MSSP) cluster part of Infrastructure (INFRA) Services Division.

Start date: October 2026

Duration: 12-18 months & Extendable

Working model: full-time, remote,

Working hours / time zone: Egypt, KSA, or UAE, with a preference for Egypt

Languages: English + Arabic or English + French

Key Responsibilities

• Develop, review, and maintain information security policies, procedures, standards, and guidelines in alignment with business goals and regulatory requirements.

• Promote security awareness across the organization and assist in designing training programs.

• Coordinate and facilitate internal and external security audits (e.g., SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR).

• Conduct regular internal assessments to identify compliance gaps and drive remediation efforts with technical teams.

• Perform security risk assessments on internal systems, business processes, and infrastructure.

• Manage the third-party/vendor risk management program by evaluating the security posture of critical vendors and SaaS tools.

• Maintain the IT/Security Risk Register, ensuring all identified risks are documented, tracked, and remediated or formally accepted.

Job Requirement: 

• Experience: 3-5 years of experience in information security, IT audit, or a GRC-specific role.

• Knowledge Base: Strong understanding of security frameworks and regulations (e.g., NIST CSF, ISO/IEC 27001, SOC 2, CIS Controls, GDPR).

• Certifications (Preferred): CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CISM (Certified Information Security Manager), or CompTIA Security+.

Preferred Qualifications

• Technical cybersecurity knowledge or prior experience in SOC.

• Understanding of enterprise IT workplace environments, TCP/IP networks also with available security controls (technical & process control) for respective layers.

• Certification like CISM, CRISC, CGEIT, CISSP or similar.

• Up to date with NIS2 directive or/and course/training completion in this direction.