We're a small team of GRC practitioners, engineers, and operators who got tired of watching GCC organisations use tools built for US compliance. We're building something better — and we're hiring people who care about getting it right.
One founding team. Two offices. The whole GCC.
The GRC tools available in Saudi Arabia and the UAE today are adapted from US products. We're building the first GCC-native compliance platform — and the market is enormous.
PDPL carries SAR 5 million penalties. NCA-ECC is mandatory for Saudi government and critical infrastructure. Every regulated entity in the GCC needs what we build. This isn't a niche — it's a compulsory compliance category.
We're early. Every team member owns a significant surface area of the product and customer experience. The work you do at DeepNotch will directly affect how GCC organisations stay compliant.
We don't adapt. We build for NCA-ECC, PDPL, and ISO 42001 natively — in Saudi financial exposure terms, with Saudi data residency, and with specialists who understand the regional regulatory context.
We hire for these and work by them every day.
We don't translate. We build for the GCC natively — NCA-ECC language, SAR exposure, Saudi data residency. No adapting. No translating.
Compliance isn't checkboxes. It's evidence, mappings, and continuous monitoring. We treat it as a data engineering problem — and hire people who do too.
A 47% NCA-ECC score is a 47%. We show real numbers to our customers — and we expect real numbers from our team. No vanity metrics.
Every customer conversation starts with a GRC specialist. We hire people who understand the domain first and can explain it clearly.
We ship fast. But we never ship compliance shortcuts. Fast means automated — not careless.
GCC compliance requirements are tightening. We build for the regulatory environment of 2028, not just 2026. Long-term thinking matters here.
We offer competitive compensation and benefits for Saudi Arabia and UAE — structured around how people actually live and work in the GCC.
Private medical, dental, and vision insurance for you and your family. Fully covered by DeepNotch.
Full visa and iqama sponsorship for international hires joining the Riyadh team.
Riyadh (KAFD) and Dubai (DIFC) offices available. GCC-based remote roles available for certain positions.
Early team members receive meaningful equity stakes in DeepNotch. You should own part of what you build.
SAR 6,000 / AED 6,000 annual learning budget for certifications, courses, and conferences. GRC certifications (CISM, CRISC, CISA) fully covered.
30 days annual leave + Saudi/UAE public holidays. Family leave policies that respect local norms.
Modern co-working spaces in King Abdullah Financial District (Riyadh) and Dubai International Financial Centre (Dubai).
Under 20 people. You'll work directly with the founders. Every role has meaningful, visible impact from day one.
Early-stage roles with meaningful equity, direct access to founders, and the chance to build the GCC's first native compliance platform.
Don't see a role that fits? We review every speculative application. Send us your CV →
We keep the process short. Our goal is to understand how you think — not to test how many interview loops you can survive.
Send your CV and a short note explaining why GCC compliance matters to you. No cover letter template — just be direct.
30 minutes with a founder. We'll explain where we are, what the role involves, and answer your questions honestly.
A short relevant task — not a puzzle. For GRC roles: a real compliance scenario. For engineering: a relevant technical problem.
Final conversation with the team. If it's a fit, we move quickly. No committee reviews. No months of delays.
Early-stage. Meaningful equity. The chance to build the category.