Information Security Specialist
Core
Execute governance, risk, and compliance activities across the information security programme, including policy development, risk assessments, and regulatory compliance monitoring.
Role type
Information Security GRC Specialist
Builds
Information security policies, risk registers, compliance reports, and audit evidence packages
Domain
Financial Technology (Fintech) / Information Security Governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk assessment execution, policy development, compliance monitoring, regulatory requirement tracking, audit coordination, control effectiveness evaluation, third-party risk assessment, security awareness program management
Preferred skills
Experience in regulated Fintech or banking environment, knowledge of SAMA CSF, ISO 27001, PDPL, or NCA ECC
Technologies
SAMA CSF, PDPL, NCA ECC, PCI-DSS, ISO 27001
Responsibilities
Maintain and update information security governance framework documentation and policy library; Execute information security risk assessments and produce risk registers; Monitor compliance posture against regulatory frameworks and coordinate remediation; Coordinate internal and external audit activities; Support regulatory submissions and compliance attestations; Monitor KPIs and KRIs for the information security programme
Seniority
Mid-level, hands-on IC
