Security Architect

We are looking for an experienced GRC Specialist to support cybersecurity governance, risk, and compliance activities. The role focuses on maintaining security policies, assessing risks, supporting audits, and managing compliance and third-party security risks.

Responsibilities

Develop and maintain information security policies, procedures, standards, and guidelines.
Conduct security risk assessments across systems, business processes, and infrastructure.
Coordinate and support internal and external security audits.
Identify compliance gaps and work with technical teams on remediation.
Manage third-party and vendor security risks.
Maintain and monitor the IT/Security Risk Register.
Promote security awareness and support security training initiatives.

Requirements

3–5 years of experience in information security, IT audit, or GRC.
Strong knowledge of security frameworks and regulations such as NIST CSF, ISO 27001, SOC 2, CIS Controls, and GDPR.
Cybersecurity technical knowledge or previous SOC experience is an advantage.
Understanding of enterprise IT environments, TCP/IP networks, and security controls.
Knowledge of NIS2 is an advantage.
Relevant certifications such as CISA, CRISC, CISM, CISSP, CGEIT, or Security+ are preferred.

Originally posted on Himalayas

Job Description

GRC Specialist – Cybersecurity Services Risk Officer

Location: Remote – Egypt, KSA, or UAE
Start Date: October 2026
Duration: 12 months
Languages: English B2+ and Arabic or French C1+

Role

Responsibilities

Develop and maintain information security policies, procedures, standards, and guidelines.
Conduct security risk assessments across systems, business processes, and infrastructure.
Coordinate and support internal and external security audits.
Identify compliance gaps and work with technical teams on remediation.
Manage third-party and vendor security risks.
Maintain and monitor the IT/Security Risk Register.
Promote security awareness and support security training initiatives.

Requirements

3–5 years of experience in information security, IT audit, or GRC.
Strong knowledge of security frameworks and regulations such as NIST CSF, ISO 27001, SOC 2, CIS Controls, and GDPR.
Cybersecurity technical knowledge or previous SOC experience is an advantage.
Understanding of enterprise IT environments, TCP/IP networks, and security controls.
Knowledge of NIS2 is an advantage.
Relevant certifications such as CISA, CRISC, CISM, CISSP, CGEIT, or Security+ are preferred.

Originally posted on Himalayas