We are seeking a GRC Expert with 4+ years of hands-on experience to support the operation of our GRC department. This role requires a strong background in international certification frameworks (ISO 27001, SOC 2), comprehensive Risk Management experience, and specific expertise in Identity and Access Management (IAM) governance.
Requirements
- Minimum of 4 years of dedicated experience in GRC, Information Security, or IT Audit
- Deep understanding of ISO 27001 and SOC 2 controls
- Familiarity with NCA ECC and SAMA regulations
- Experience with automated GRC platforms
- Solid understanding of IAM concepts (RBAC, SSO, MFA, PAM)
- Proficiency in risk assessment methodologies (e.g., ISO 27005, NIST SP 800-30)
- Holding at least one relevant certification is preferred (e.g., CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor)
Benefits
- Competitive Package – Salary + equity options + performance incentives
- Flexible & Remote – Work from anywhere with an outcomes-first culture
- Team of Experts – Work with designers, engineers, and security pros solving real-world problems
- Growth-Focused – Your ideas ship, your voice counts, your growth matters
- Global Impact – Build products that protect critical systems and data