Governance, Risk & Compliance specialist

Company Description:

Naseej is a leading technology company committed to harnessing the power of digital transformation in learning & knowledge management by enabling our customers to provide rich experiences for their users and adapt to a dynamic technology landscape while reducing their technical burden enabling them to focus on achieving their strategic objectives. And for almost 36 years, Naseej with its branches all over the MENA region had made many contributions to be one of the market leaders in the fields of E-Learning, Edu-Tech & Digital transformation. Naseej website: https://www.naseej.com/

Job Summary:

This role is responsible for identifying, assessing, and managing cybersecurity risks for a project within the Saudi Ministry of Commerce. It supports the implementation of risk management processes, maintains risk registers, and ensures compliance with applicable regulatory and industry frameworks such as NCA, SAMA, and ISO 27001.

Key Responsibilities:

• Conduct cybersecurity risk assessments to identify, evaluate, and document risks, threats, vulnerabilities, and control gaps.

• Maintain and update risk registers, ensuring risks are accurately tracked, monitored, and reported.

• Support the development, implementation, and monitoring of risk treatment and mitigation plans to reduce project and organizational risk exposure.

• Prepare periodic risk reports and dashboards, and coordinate with stakeholders to ensure timely remediation of identified risks.

• Ensure alignment with the cybersecurity and regulatory requirements applicable to the Saudi Ministry of Commerce project.

• Assist in ensuring compliance with cybersecurity regulatory requirements and standards, including NCA, SAMA, and ISO 27001.

• Support internal and external audits, compliance assessments, and risk-related governance activities.

Requirements:

• Saudi National

• Bachelor’s degree in Cybersecurity, Information Security, or a related field

• 3–5 years of practical experience in cybersecurity compliance or GRC