GRC Specialist (Information Security, Privacy and Business Continuity)

We are seeking an experienced GRC Specialist to support the implementation and day-to-day operations of Information Security Privacy Business Continuity Risk Management Compliance Internal Audit Coordination Vendor Risk Management and GRC platform activities. The ideal candidate will be responsible for monitoring compliance maintaining governance records coordinating assessments and audits managing risk and compliance registers and preparing management reports and dashboards.

• Support the operation and continuous improvement of Information Security Privacy Business Continuity and Compliance programs.
• Maintain risk registers compliance registers audit trackers and governance documentation.
• Coordinate and track ISO 27001 ISO 22301 PDPL and regulatory compliance initiatives.
• Conduct vendor security privacy and business continuity assessments and track remediation activities.
• Coordinate audit requests evidence collection findings management and corrective action follow-up.
• Maintain ROPA DPIA privacy incident BIA BCP and Disaster Recovery records.
• Support administration of GRC platforms including user management workflows dashboards and reporting.
• Prepare monthly and quarterly reports KPIs dashboards and management presentations.
• Deliver information security privacy and business continuity awareness activities and training sessions.
• Monitor risks findings issues and action plans and ensure timely closure through stakeholder coordination.

• 5 years of experience in Information Security GRC Risk Management Compliance Privacy Business Continuity or related fields.
• Experience supporting ISO 27001 ISO 22301 and PDPL compliance initiatives.
• Experience maintaining risk registers compliance registers and governance documentation.
• Hands-on experience coordinating audits assessments and evidence management activities.
• Experience conducting vendor risk and third-party assessments.
• Experience working with GRC tools/platforms and management reporting dashboards.
• Strong communication stakeholder management and documentation skills.
• Fluent in English and Arabic.

• CISSP
• CISM
• CRISC
• CGRC
• ISO 27001 Lead Implementer / Lead Auditor
• ISO 22301 Lead Implementer / Lead Auditor
• CIPM
• CIPP
• CDPSE
• CBCI