GRC Engineer- Saudi National- Tabuk, KSA

Role Overview

GRC Engineer position at DeepSource Technologies, supporting a Governmental institute in Tabuk, Saudi Arabia. This is an onsite role for Saudi nationals.

Role Purpose

Support governance, risk management, and compliance initiatives through expertise in cybersecurity governance frameworks, risk assessment, security controls, and audit requirements. Deliver documentation, reporting, and communication across cybersecurity compliance and risk management activities.

Key Responsibilities

Governance & Compliance

• Establish and maintain cybersecurity governance frameworks aligned with organizational and regulatory requirements.
• Develop and support security policies and compliance documentation.
• Support cybersecurity compliance initiatives and audit requirements.

Risk Management

• Conduct security risk assessments and evaluate risk across the organization.
• Monitor and manage security controls implementation and effectiveness.
• Support risk management activities and mitigation strategies.

Reporting & Documentation

• Deliver clear, comprehensive documentation and reporting on governance, risk, and compliance activities.
• Communicate compliance status and risk findings to stakeholders.

Qualifications & Experience

• Saudi National.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 4+ years of experience in Governance, Risk & Compliance (GRC).
• Strong knowledge of cybersecurity governance, risk management, and compliance frameworks.
• Experience in security policies, controls, risk assessments, and compliance requirements.

Skills & Competencies

• Strong analytical skills.
• Strong documentation and reporting skills.
• Strong communication skills.

Additional Information

• Onsite position in Tabuk, Saudi Arabia.
• Relevant GRC or cybersecurity certifications such as CISA, CRISC, ISO 27001, or similar are preferred.
• Experience working with government or public-sector entities is preferred.