cyber grc specialist

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>

We are seeking a Cyber GRC Specialist to support and advance the company&rsquo;s cybersecurity governance, risk management, and compliance (GRC) initiatives. The successful candidate will collaborate with Security, IT, Legal, Privacy, Compliance, and business teams to identify and manage cyber risk, implement controls, maintain compliance with applicable frameworks and regulations, and support continuous improvement of the security posture. This role requires a pragmatic, consultative approach and the ability to translate technical security concepts into business risk terms.
<h4 class="jobSectionHeader">Key Responsibilities</h4>
<h5 class="jobSectionHeader">Governance &amp; Policy</h5>
<ul>
<li>Develop, maintain, and operationalize cybersecurity policies, standards, and procedures aligned with industry frameworks and regulatory requirements (e.g., NIST CSF, ISO 27001, SOC 2, PCI, relevant regional regulations).</li>
<li>Support security governance forums and reporting to senior leadership and stakeholders on cyber risk, control effectiveness, and remediation progress.</li>
<li>Collaborate with cross-functional teams to ensure security requirements are integrated into business processes, projects, and third-party relationships.</li>
</ul>
<h5 class="jobSectionHeader">Risk Management &amp; Assessments</h5>
<ul>
<li>Conduct and coordinate risk assessments, control gap analyses, and threat/risk modeling for systems, applications, and third-party services.</li>
<li>Maintain the risk register, prioritize remediation activities, and track closure of identified vulnerabilities and control deficiencies.</li>
<li>Perform vendor security and risk assessments; review third-party contracts and recommend appropriate security controls and contractual language.</li>
</ul>
<h5 class="jobSectionHeader">Compliance &amp; Audit Support</h5>
<ul>
<li>Support internal and external compliance initiatives, audits, and certifications (e.g., SOC 2, ISO 27001), including evidence collection, control testing, and remediation coordination.</li>
<li>Monitor regulatory and industry compliance requirements and translate obligations into practical control and process requirements across the organization.</li>
<li>Prepare and maintain documentation, control narratives, and artifacts required for assessments and regulatory inquiries.</li>
</ul>
<h5 class="jobSectionHeader">Incident Response &amp; Continuous Improvement</h5>
<ul>
<li>Participate in incident response planning and post-incident reviews; advise on control improvements and regulatory/contractual notification considerations.</li>
<li>Collaborate with Security Operations and IT teams to ensure controls are effectively implemented, monitored, and improved based on lessons learned and evolving threats.</li>
<li>Identify opportunities to automate control monitoring, reporting, and GRC workflows using GRC platforms and security tooling.</li>
</ul>
<h5 class="jobSectionHeader">Training, Awareness &amp; Advisory</h5>
<ul>
<li>Develop and deliver role-based security awareness, GRC guidance, and targeted training for employees, contractors, and business partners.</li>
<li>Provide practical, risk-based advisory to Product, Engineering, IT, and business teams on secure design, control selection, and compliance requirements.</li>
<li>Act as a trusted advisor for security and compliance questions related to new projects, cloud deployments, and third-party integrations.</li>
</ul>
<h4 class="jobSectionHeader">Required Qualifications - Skills &amp; Experience</h4>
<ul>
<li>Bachelor&rsquo;s degree in Information Security, Computer Science, Cybersecurity, Risk Management, or a related field, or equivalent practical experience.</li>
<li>3+ years of demonstrated experience in cybersecurity GRC, risk management, compliance, or related roles within a commercial or regulated environment.</li>
<li>Familiarity with common cybersecurity frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and practical experience applying them.</li>
<li>Experience performing risk assessments, vendor/security assessments, control gap analysis, and supporting audits or certifications.</li>
<li>Working knowledge of cloud security concepts (AWS, Azure, GCP), identity and access management, and common security controls.</li>
<li>Strong written and verbal communication skills with the ability to document controls, prepare executive reports, and communicate with technical and non-technical stakeholders.</li>
<li>Experience with GRC platforms, ticketing systems, and security assessment tools; comfortable working in cross-functional, fast-paced environments.</li>
</ul>
<h4 class="jobSectionHeader">Preferred Qualifications</h4>
<ul>
<li>Relevant certifications such as CISSP, CISM, CRISC, CGEIT, or certification in GRC platforms preferred.</li>
<li>Experience supporting SOC 2, ISO 27001, or other compliance programs and working with external auditors.</li>
<li>Prior exposure to privacy requirements and data protection interactions with cybersecurity controls is a plus.</li>
<li>Experience in cloud-native environments, DevSecOps practices, and automation of control monitoring is advantageous.</li>
</ul>
<h4 class="jobSectionHeader">Work Environment &amp; Compensation</h4>
<ul>
<li>Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings, audits, or vendor engagements.</li>
<li>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li>
<li>Opportunities for professional development, certification support, and career progression within Security, Compliance, and Risk functions.</li>
<li>Inclusive and respectful workplace culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Specialist

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

Virtu Thinko

Sr Advanced Cyber Sec Arch\Engr &ndash; ICS\OTOverviewThis position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the PositionAct as primary customer interface to ensure proposed solutions meet their business needs.Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.Maintain cyber security certifications.Requires 30&ndash; 65% travelQualifications &amp; Experience:Bachelor&rsquo;s degree in a computer related field like Computer Science, Computer information systems degree with a minimum of 12 years&rsquo; experience in industrial automation network systems.Must have:Networking certs (CCNA, CCNP).Cyber Security Risk Analysis.10+ years Industrial Networking.Linux/Windows Security Basics.10+ years Leading Security Projects.Strong Virtualization Experience (VCP).10+ years Performing Audits/Assessments.Familiarity with Industrial Site&rsquo;s Safety Requirements.10+ years&rsquo; Experience within Industrial Process Control.Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.Experience in LAN/WAN architectures &amp; Purdue ICS model.Process Control System Design/Implementation Knowledge.Experience designing and optimizing complex LAN environments.Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).Global Industrial Cyber Security Professional (GICSP) certification.Cisco Certified Network/Design/Security Professional (at least one).Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).Experience performing cybersecurity/network/system services at customer sites.CISSP Certified Information Systems Security Professional or similar security certification.Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).Excellent troubleshooting skills to resolve complex network/application/system integration issues.Competencies:Result orientedConfident &ndash; ability to work with minimal supervisionOpen minded- Integrative thinkerInfluences without authorityEffective communicatorCustomer service orientatedJob Types: Full-time, Contract Contract length: 12 monthsPay: ﷼12,000.00 - ﷼25,000.00 per monthWork Location: In person

Sr Advanced Cyber Sec ArchEngr – ICSOT

Cyber Sec Arch\Engr ll &ndash; ICS\OT Overview This position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the Position&bull;Act as primary customer interface to ensure proposed solutions meet their business needs.&bull;Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.&bull;Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.&bull;Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.&bull;Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.&bull;Maintain cyber security certifications.&bull;Requires 30&ndash; 65% travelQualifications &amp; Experience:&bull;Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 3 years&rsquo; experience in industrial automation network systems.Must have:&bull;Networking certs (CCNA).&bull;3+ years Industrial Networking.&bull;Linux/Windows Security Basics.&bull;Virtualization Experience (VCP).&bull;Familiarity within Industrial Process Control.&bull;Familiarity with Industrial Site&rsquo;s Safety Requirements.&bull;Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.&bull;Familiarity in LAN/WAN architectures &amp; Purdue ICS model.&bull;Process Control System Design/Implementation Knowledge.&bull;Familiarity designing and optimizing complex LAN environments.&bull;Cisco Certified Network/Design/Security Professional (at least one).&bull;Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Nice to have:&bull;CompTIA Security +.&bull;Cyber Security Risk Analysis.&bull;Certified Ethical Hacker (CEH).&bull;Splunk Fundamentals &amp; Administration.&bull;3+ years Performing Audits/Assessments.&bull;Microsoft Certified Systems Engineer (MCSE).&bull;Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).&bull;Global Industrial Cyber Security Professional (GICSP) certification.&bull;Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).&bull;Experience performing cybersecurity/network/system services at customer sites.&bull;CISSP Certified Information Systems Security Professional or similar security certification.&bull;Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).&bull;Excellent troubleshooting skills to resolve complex network/application/system integration issues.Competencies:&bull;Result-oriented.&bull;Effective communicator.&bull;Influences without authority.&bull;Customer service oriented.&bull;Open-minded- Integrative thinker.&bull;Confident &ndash; ability to work with minimal supervision.Job Types: Full-time, Contract Contract length: 12 monthsPay: ﷼7,000.00 - ﷼12,000.00 per monthWork Location: In person

Cyber Sec ArchEngr ll – ICSOT

Advanced Cyber Sec Arch\Engr &ndash; ICS\OTOverviewThis position is responsible for providing onsite and offsite cyber security services associated with industrial Process Control Networks for Company customers in the Oil and Gas; Hydrocarbon Processing; Power Generation; Pulp, Paper &amp; Printing; Continuous Web Solutions; Petrochemicals; Life Sciences; and Metals, Minerals and Mining markets. Services provided include on-site and offsite consulting, troubleshooting, network designs, implementation, assessments, and other related tasks as identified. Responsibilities of the PositionAct as primary customer interface to ensure proposed solutions meet their business needs.Maintain technical competency with the Company Process Solutions security and networking product/systems portfolio, while maintaining expert knowledge on specific designatedsecurity/network disciplines.Develop sound and trusted relationships with internal and external customers by providing accurate and efficient technical/engineering support.Respond to customer inquiries, questions, and issues by diagnosing problems and providing the most appropriate technical solution in an accurate and timely manner.Maintain knowledge of current industry security standards such as NIST, NCA, IEC-62443, ISO27001, etc.Maintain cyber security certifications.Requires 30&ndash; 65% travelQualifications &amp; Experience:Bachelor&rsquo;s degree in a computer related field such as Computer Science, Computer informationsystems degree with a minimum of 7 years&rsquo; experience in industrial automation network systems.Must have:Networking certs (CCNA).Cyber Security Risk Analysis.5+ years Industrial Networking.Linux/Windows Security Basics.5+ years Leading Security Projects.Strong Virtualization Experience (VCP).5+ years Performing Audits/Assessments.Familiarity with Industrial Site&rsquo;s Safety Requirements.5+ years&rsquo; Experience within Industrial Process Control.Microsoft &ndash; Active Directory, DNS, WSUS, Terminal Server.Experience in LAN/WAN architectures &amp; Purdue ICS model.Process Control System Design/Implementation Knowledge.Experience designing and optimizing complex LAN environments.Global Industrial Cyber Security Professional (GICSP) certification.Cisco Certified Network/Design/Security Professional (at least one).Experience different firewall vendors (Cisco, Juniper, Palo alto, Fortinet).Experience performing cybersecurity/network/system services at customer sites.Experience with anti-virus systems, backup &amp; restore, Network management &amp; Whitelisting.Experience with current industry security standards (NIST, NCA, IEC-62443, ISO27001, etc).Excellent troubleshooting skills to resolve complex network/application/system integration issues.Nice to have:CompTIA Security +.Certified Ethical Hacker (CEH).Splunk Fundamentals &amp; Administration.Microsoft Certified Systems Engineer (MCSE).Experience on SIEM solution such as (Splunk, ArcSight, Tripwire).CISSP Certified Information Systems Security Professional or similar security certification.Competencies:Result orientedConfident &ndash; ability to work with minimal supervisionOpen minded- Integrative thinkerInfluences without authorityEffective communicatorCustomer service orientatedJob Types: Full-time, Contract Contract length: 12 monthsPay: ﷼8,000.00 - ﷼15,000.00 per monthWork Location: In person

Advanced Cyber Sec ArchEngr – ICSOT

<div><h4 class="jobSectionHeader">Job Summary</h4>

We are seeking a seasoned Senior Internal IT Auditor to join the Internal Audit team and provide independent, objective assurance over the company&rsquo;s IT controls, risk management, and governance processes. The successful candidate will plan and execute IT audit engagements across applications, infrastructure, cloud, identity and access management, change management, and third-party services. This role will collaborate with IT, Security, Risk, Compliance, and business stakeholders to identify control gaps, recommend practical remediation, and drive improvements that support business objectives and regulatory requirements.
<h4 class="jobSectionHeader">Key Responsibilities</h4>
<h5 class="jobSectionHeader">Audit Planning &amp; Execution</h5>
<ul>
<li>Plan, scope, and execute IT audit engagements using a risk-based approach, including development of audit programs, testing plans, and workpapers.</li>
<li>Perform detailed testing of IT general controls and application controls across cloud and on-premise environments, including change management, configuration management, and backup/recovery.</li>
<li>Evaluate the design and operating effectiveness of controls related to identity and access management, privileged access, segregation of duties, and authentication mechanisms.</li>
</ul>
<h5 class="jobSectionHeader">Risk Assessment &amp; Control Evaluation</h5>
<ul>
<li>Conduct IT risk assessments to identify and prioritize technology risks and control gaps that could impact confidentiality, integrity, and availability of systems and data.</li>
<li>Map IT risks and controls to relevant frameworks and standards (e.g., COBIT, NIST, ISO 27001, SOC 2) and provide pragmatic control recommendations.</li>
<li>Assess third-party and cloud provider controls, review vendor risk management artifacts, and perform outsourced service audits where applicable.</li>
</ul>
<h5 class="jobSectionHeader">Reporting &amp; Remediation</h5>
<ul>
<li>Prepare clear, well-supported audit findings, risk ratings, and actionable remediation recommendations; draft audit reports and present results to management and audit committees.</li>
<li>Work with process and technology owners to develop remediation plans, track remediation progress, and validate corrective actions.</li>
<li>Coordinate with external auditors and regulators as needed to support audits and attestations.</li>
</ul>
<h5 class="jobSectionHeader">Continuous Improvement &amp; Advisory</h5>
<ul>
<li>Provide advisory support on IT control design and implementation to enable operational improvements while maintaining auditor independence.</li>
<li>Identify opportunities to enhance audit methodologies, testing tools, and automation to increase audit efficiency and coverage.</li>
<li>Mentor junior audit staff, review their workpapers and findings, and contribute to team knowledge-sharing and training.</li>
</ul>
<h4 class="jobSectionHeader">Required Qualifications - Skills &amp; Experience</h4>
<ul>
<li>Bachelor&rsquo;s degree in Information Technology, Computer Science, Accounting, Cybersecurity, or a related field, or equivalent practical experience.</li>
<li>5+ years of experience performing IT audits, IT risk assessments, or IT control testing in an internal audit, external audit, or IT risk role.</li>
<li>Strong technical understanding of systems, networks, cloud platforms (e.g., AWS, Azure, GCP), databases, and common enterprise applications.</li>
<li>Experience auditing identity and access management, change management, system development lifecycle, vulnerability management, and patching processes.</li>
<li>Familiarity with audit methodologies, sampling techniques, and documentation standards; ability to produce clear, concise audit workpapers and reports.</li>
<li>Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders and influence remediation efforts.</li>
<li>Demonstrated analytical mindset with experience in risk assessment, control evaluation, and executive-level reporting.</li>
<li>Proficiency with audit and productivity tools (e.g., GRC platforms, data analytics tools, Office suite).</li>
</ul>
<h4 class="jobSectionHeader">Preferred Qualifications</h4>
<ul>
<li>Relevant certifications such as CISA, CISSP, CRISC, CISM, or Certified Internal Auditor (CIA) preferred.</li>
<li>Experience supporting Sarbanes-Oxley (SOX) IT testing, SOC 2 examinations, or other regulatory audits.</li>
<li>Background in cloud security, DevOps/SecOps practices, or secure software development lifecycle is a plus.</li>
<li>Experience with audit automation, data analytics (ACL, IDEA, Python, SQL), or continuous auditing tools.</li>
</ul>
<h4 class="jobSectionHeader">Work Environment &amp; Compensation</h4>
<ul>
<li>Full-time position with a hybrid onsite/remote model; occasional travel may be required for fieldwork, audits, or meetings with third parties.</li>
<li>Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li>
<li>Opportunities for professional development, certification support, and career progression within Internal Audit, Risk, and Security functions.</li>
<li>Inclusive, respectful work culture that values diversity, equity, and a healthy work-life balance.</li></ul></div>

Senior Internal IT Auditor

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking an experienced Data Privacy Officer to lead the company&rsquo;s privacy program and ensure compliance with applicable data protection laws, regulations, and internal policies. The successful candidate will develop, implement, and maintain privacy governance, risk management, and data protection controls across the organization. This role will partner with Legal, Security, Compliance, IT, HR, Product, and business stakeholders to manage privacy risks, support privacy-by-design initiatives, respond to data subject rights requests, and prepare for regulatory inquiries and assessments.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
Privacy Program Development &amp; Governance</h5><ul><li>
Design, implement, and maintain a comprehensive privacy program aligned with global data protection frameworks (e.g., GDPR, CCPA/CPRA, LGPD) and industry best practices.</li><li>
Develop and maintain privacy policies, procedures, standards, and playbooks; ensure documentation is current and accessible to relevant stakeholders.</li><li>
Establish and chair cross-functional privacy governance forums to oversee data protection initiatives, risk remediation, and accountability mechanisms.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Compliance</h5><ul><li>
Conduct privacy risk assessments, DPIAs (Data Protection Impact Assessments), and vendor privacy reviews to identify and mitigate privacy risks associated with new and existing products, services, and third-party relationships.</li><li>
Map data flows and maintain records of processing activities (RoPA); classify personal data and recommend appropriate retention, minimization, and protection measures.</li><li>
Monitor regulatory developments and perform gap assessments against applicable legal requirements; drive remediation plans to achieve and sustain compliance.</li></ul><h5 class="jobSectionHeader">
Privacy Operations &amp; Incident Response</h5><ul><li>
Manage processes for handling data subject access requests, erasure requests, objection requests, and other privacy-related inquiries in accordance with legal timelines and internal SLAs.</li><li>
Lead privacy aspects of incident response activities, coordinate cross-functional investigations for data breaches, assess risk, and advise on regulatory notification and remediation steps.</li><li>
Oversee privacy-related vendor contracts, data processing agreements, and ensure appropriate technical and organizational measures are in place with third parties.</li></ul><h5 class="jobSectionHeader">
Training, Awareness &amp; Advisory</h5><ul><li>
Develop and deliver privacy training, awareness campaigns, and role-based guidance to employees, contractors, and business partners.</li><li>
Provide practical privacy advice to Product, Engineering, Marketing, HR, and other teams to enable privacy-by-design and privacy-friendly feature development.</li><li>
Act as the primary internal advisor on privacy requirements for new projects, major releases, and cross-border data transfers.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Law, Information Security, Privacy, Business, or a related field, or equivalent practical experience.</li><li>
5+ years of experience in privacy, data protection, compliance, or related roles with demonstrated ownership of privacy program activities.</li><li>
Strong knowledge of global privacy laws and frameworks (e.g., GDPR, CCPA/CPRA) and experience applying them in a commercial environment.</li><li>
Proven experience conducting DPIAs, vendor privacy assessments, and managing data subject rights processes.</li><li>
Excellent written and verbal communication skills with the ability to explain complex privacy requirements to technical and non-technical audiences.</li><li>
Demonstrated ability to work cross-functionally, influence stakeholders, and manage competing priorities in a fast-paced environment.</li><li>
Familiarity with privacy-enhancing technologies, data mapping tools, GRC platforms, and incident response processes.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CIPP/US, CIPP/E, CIPM, CIPT, or equivalent privacy certifications preferred.</li><li>
Experience working with multinational organizations and managing cross-border data transfer mechanisms (e.g., SCCs, BCRs, Adequacy assessments).</li><li>
Background in information security, compliance, or legal functions with prior exposure to security controls and cloud-native environments.</li><li>
Experience supporting regulatory investigations, audits, or responding to supervisory authority inquiries is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time role with a hybrid onsite/remote work model; occasional travel may be required for stakeholder meetings or regulatory engagements.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, certification support, and career progression within Privacy, Legal, Compliance, and Risk functions.</li><li>
Inclusive, respectful workplace culture that values diversity, equity, and work-life balance.</li></ul></div>

Data Privacy Officer (DPO)

Explore 33+ Cyber grc specialist in Al Khobar this April. Find roles across top companies and apply now to boost your career.