Cybersecurity Compliance Specialist

About the Role

Cipher is seeking an experienced Cybersecurity Compliance Specialist based in Jubail, Eastern, Saudi Arabia. This role focuses on supporting and managing compliance, governance, and audit functions in line with national and international cybersecurity standards. The successful candidate will play a critical part in ensuring organizational cybersecurity practices adhere to regulatory expectations and internal policies.

Key Responsibilities

• Evaluate organizational controls and processes against the requirements of the NCA Essential Cybersecurity Controls (ECC) and ISO/IEC 27001 standards.
• Conduct thorough technical compliance checks and review system configurations to identify gaps or weaknesses.
• Benchmark system performance and security settings against CIS recommendations.
• Manage compliance documentation, including the ongoing update of registers detailing non-compliance.
• Provide expertise and support for PCI compliance programs across relevant business units.
• Draft and maintain comprehensive compliance reports to facilitate internal and external audit processes.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, or a closely related discipline.
• At least 5 to 7 years of hands-on involvement in cybersecurity compliance and auditing roles.
• Practical experience in technical compliance reviews and evaluating security configurations.
• Familiarity with compliance practices in sectors such as Energy, Financial Services, OT/ICS, Cloud Computing, or Government.
• Possession of at least one of the following certifications: CISA, CISM, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer.
• Proficiency in both Arabic and English languages.