GRC Engineer

Smart Technology Solutions

What You ll Do:

Your mission will be to operate and elevate our Information Security Management System (ISMS) based on ISO/IEC 27001:2022 and more:

• Keep ISMS documentation, processes, and records up to date and audit-ready
• Lead internal audits, compliance checks, and management reviews
• Be our star player during ISO 27001 audits (prep, evidence, responses you own it!)
• Perform risk assessments across assets, vendors, and projects and maintain our risk register
• Manage the lifecycle of nonconformities, corrective actions, and improvement efforts
• Maintain and review the Statement of Applicability (SoA) and ensure Annex A controls are in place
• Ensure we stay aligned with national cybersecurity standards like NCA ECC and SAMA
• Keep our policies fresh, aligned, and accessible to the people who need them
• Monitor GRC metrics and share smart, clear reports with leadership
• Champion awareness & training campaigns to grow our culture of security

What We re Looking For:

• Bachelor s degree in information security, Computer Science, or a related field
• 2 5 years of experience in GRC, ISMS operations, information security, or compliance
• Practical, hands-on experience with ISO/IEC 27001 (especially audits & certification maintenance)
• Familiarity with risk management frameworks and ITIL
• Bonus points for experience with GRC or ISMS platforms
• Extra gold stars for experience with awareness/training platforms
• ISO 27001 Lead Implementer or Lead Auditor highly preferred
• GRCA or GRCP are a definite plus!