Information Security Specialist (GRC)

tabby | تابي • Saudi Arabia

Relocation

Apply Now

AI Summary

Independently execute governance, risk, and compliance activities across Tabby's information security programme. Manage information security governance, risk assessments, and compliance monitoring against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS. Requires 1-3 years of experience in GRC, with a Bachelor's degree in IT or related field and exposure to regulated Fintech environments.

Key Highlights

Independently execute information security risk assessments and maintain risk registers.

Monitor compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS.

Maintain and update the information security governance framework, policies, and standards.

Key Responsibilities

Maintain and update the information security governance framework documentation, policy library, and associated standards and procedures.

Draft and revise information security policies, standards, and baselines, ensuring alignment with applicable regulatory requirements and business objectives.

Monitor and track changes in legal, regulatory, and contractual requirements affecting information security (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating the compliance register accordingly.

Execute information security risk assessments independently, applying the organization's risk assessment methodology and producing complete risk registers.

Maintain and update the information asset register — tracking asset owners, classifications, and associated risk profiles.

Lead business impact assessment (BIA) data collection activities, coordinating with asset owners and business units.

Conduct control effectiveness evaluations for key information security controls, documenting findings and escalating gaps.

Coordinate third-party information security risk assessments — preparing assessment questionnaires, reviewing vendor responses, and producing risk summaries.

Monitor the organization's compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS — tracking control status, identifying gaps, and coordinating remediation.

Coordinate internal and external audit activities — gathering evidence packages, liaising with auditors, tracking findings, and monitoring remediation progress.

Support the preparation of regulatory submissions, self-assessments, and compliance attestations required by SAMA, NCA, and PCI Council.

Maintain and enhance the security awareness programme — developing training materials, scheduling communications, and tracking completion metrics.

Monitor KPIs and KRIs for the information security programme, preparing accurate and timely dashboards for senior management review.

Looking to advance your Cyber Security career with relocation support? Explore Cyber Security Jobs with Relocation Packages that include comprehensive packages to help you move and settle in your new role.

Technical Skills Required

Information Security Governance Risk Management Compliance Monitoring

Benefits & Perks

Employee stock options programme

Relocation support

Work devices provided

Discover our full range of relocation jobs with comprehensive support packages to help you relocate and settle in your new location.

Nice to Have

ISO 27001 Foundation or Lead Implementer certification

CompTIA Security+ or equivalent certification

Working toward CRISC or CISM certification

Experience in a regulated Fintech or banking environment

Job Description

InfoSec GRCFull [email protected]'re looking for an Information Security Specialist (GRC) to join Tabby! The successful candidate will independently execute governance, risk, and compliance activities across the Tabby's information security programme.Key Responsibilities

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.