وظيفة أخصائي حوكمة ومخاطر وامتثال للأمن السيبراني شاغرة لدى 2P Perfect Presentation في الرياض

Since 2004, 2P - Perfect Presentation has been a leader in Saudi Arabia’s ICT landscape, delivering integrated technology solutions that help organizations accelerate digital transformation and improve operational efficiency. With a strong foundation in innovation and service excellence, 2P continues to provide end-to-end solutions through its specialized business units and trusted market expertise.

We are looking for an experienced Cybersecurity GRC Specialist with strong hands-on experience in Cybersecurity Governance, Risk Management, Compliance, Business Continuity, and Security Awareness.

Key Responsibilities

• Develop, review, and maintain cybersecurity policies, procedures, standards, strategies, and governance frameworks.
• Define and monitor cybersecurity KPIs and governance performance indicators.
• Conduct cybersecurity risk assessments and maintain organizational risk registers.
• Develop and follow up on risk treatment plans and mitigation actions.
• Assess cybersecurity compliance against applicable regulatory and industry requirements.
• Support compliance with frameworks and standards including:
• NCA ECC
• NCA DCC
• NCA CCC
• NCA TCC
• CST CRF
• ISO/IEC 27001

• Conduct compliance assessments, identify gaps, and support remediation plans.
• Support Business Impact Analysis (BIA) activities.
• Develop, maintain, and test Business Continuity Plans (BCP).
• Participate in periodic BCP testing and continuity exercises.
• Develop and execute cybersecurity awareness campaigns.
• Coordinate and conduct phishing simulation exercises.
• Prepare cybersecurity governance, risk, compliance, and awareness reports for management.
• Coordinate with IT, infrastructure, business, risk, compliance, and other relevant stakeholders.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 3-5 years of relevant experience in Cybersecurity GRC, Risk, Compliance, or related functions.
• Strong experience in Cybersecurity Governance, including policies, procedures, standards, strategies, and KPI development.
• Hands-on experience in Cybersecurity Risk Management, including risk assessments, risk registers, and risk treatment.
• Good knowledge of NCA cybersecurity controls and Saudi regulatory requirements.
• Familiarity with ISO/IEC 27001 and cybersecurity compliance practices.
• Experience in Business Continuity, BIA, BCP development, and BCP testing.
• Experience in cybersecurity awareness programs and phishing simulations.
• Arabic speaker.
• Strong analytical, documentation, communication, and stakeholder-management skills.

Preferred Certifications

• CompTIA Security+
• CISA - Certified Information Systems Auditor
• CRISC - Certified in Risk and Information Systems Control
• CISM - Certified Information Security Manager
• CISSP - Certified Information Systems Security Professional