Build the GRC Platform the GCC Deserves.
We're a small team of GRC practitioners, engineers, and operators who got tired of watching GCC organisations use tools built for US compliance. We're building something better — and we're hiring people who care about getting it right.
One founding team. Two offices. The whole GCC.
We're Building in a Market That Has Never Been Served.
The GRC tools available in Saudi Arabia and the UAE today are adapted from US products. We're building the first GCC-native compliance platform — and the market is enormous.
A Real Market, Not a Side Bet
PDPL carries SAR 5 million penalties. NCA-ECC is mandatory for Saudi government and critical infrastructure. Every regulated entity in the GCC needs what we build. This isn't a niche — it's a compulsory compliance category.
Small Team, Large Impact
We're early. Every team member owns a significant surface area of the product and customer experience. The work you do at DeepNotch will directly affect how GCC organisations stay compliant.
GCC First, Not GCC Last
We don't adapt. We build for NCA-ECC, PDPL, and ISO 42001 natively — in Saudi financial exposure terms, with Saudi data residency, and with specialists who understand the regional regulatory context.
Our Principles.
We hire for these and work by them every day.
Region First
We don't translate. We build for the GCC natively — NCA-ECC language, SAR exposure, Saudi data residency. No adapting. No translating.
Regulation as a Data Problem
Compliance isn't checkboxes. It's evidence, mappings, and continuous monitoring. We treat it as a data engineering problem — and hire people who do too.
Honesty Over Feel-Good Metrics
A 47% NCA-ECC score is a 47%. We show real numbers to our customers — and we expect real numbers from our team. No vanity metrics.
GRC First, Sales Second
Every customer conversation starts with a GRC specialist. We hire people who understand the domain first and can explain it clearly.
Speed Without Skipping Steps
We ship fast. But we never ship compliance shortcuts. Fast means automated — not careless.
Built for What's Coming
GCC compliance requirements are tightening. We build for the regulatory environment of 2028, not just 2026. Long-term thinking matters here.
Benefits Built for the Region.
We offer competitive compensation and benefits for Saudi Arabia and UAE — structured around how people actually live and work in the GCC.
Comprehensive Health
Private medical, dental, and vision insurance for you and your family. Fully covered by DeepNotch.
Iqama Sponsorship
Full visa and iqama sponsorship for international hires joining the Riyadh team.
Hybrid & Remote Options
Riyadh (KAFD) and Dubai (DIFC) offices available. GCC-based remote roles available for certain positions.
Equity Participation
Early team members receive meaningful equity stakes in DeepNotch. You should own part of what you build.
Learning Budget
SAR 6,000 / AED 6,000 annual learning budget for certifications, courses, and conferences. GRC certifications (CISM, CRISC, CISA) fully covered.
Generous Leave
30 days annual leave + Saudi/UAE public holidays. Family leave policies that respect local norms.
KAFD & DIFC Offices
Modern co-working spaces in King Abdullah Financial District (Riyadh) and Dubai International Financial Centre (Dubai).
Small Team, Real Ownership
Under 20 people. You'll work directly with the founders. Every role has meaningful, visible impact from day one.
We're Hiring.
Early-stage roles with meaningful equity, direct access to founders, and the chance to build the GCC's first native compliance platform.
Senior GRC Specialist — NCA-ECC & PDPL
GRC Specialist — ISO 27001 & ISO 42001
Senior Software Engineer — Backend
Full-Stack Engineer
GRC Sales Engineer
Customer Success Manager — GCC
Don't see a role that fits? We review every speculative application. Send us your CV →
What to Expect.
We keep the process short. Our goal is to understand how you think — not to test how many interview loops you can survive.
Apply
Send your CV and a short note explaining why GCC compliance matters to you. No cover letter template — just be direct.
Intro Call
30 minutes with a founder. We'll explain where we are, what the role involves, and answer your questions honestly.
Technical / Case Work
A short relevant task — not a puzzle. For GRC roles: a real compliance scenario. For engineering: a relevant technical problem.
Final + Offer
Final conversation with the team. If it's a fit, we move quickly. No committee reviews. No months of delays.
Help Us Build What the GCC Has Been Missing.
Early-stage. Meaningful equity. The chance to build the category.