GRC Consultant (saudi only)

Role Overview

Responsibilities

• Gather and analyze data for GRC assessments.
• Prepare assessment reports, governance documentation, and client presentations.
• Lead preparation and execution of external audits for ISO 27001 and SOC 2 certifications.
• Manage compliance with NCA ECC and SAMA cybersecurity frameworks.
• Assess ISO 27001, NDI Controls, NCA frameworks, and other best practices.
• Develop and implement policies, procedures, frameworks, and controls.
• Participate in client workshops and project meetings.
• Liaise with GRC, IT, legal, audit, and operations teams.
• Assist with selecting and implementing GRC software solutions.
• Monitor regulatory changes, emerging risks, and industry trends.
• Evaluate third-party vendors for security and risk-management compliance.
• Track GRC metrics and issues and provide input to enterprise risk management.

Minimum Requirements

• Bachelor’s degree in cybersecurity, information technology, or a related field.
• Basic understanding of cybersecurity, internal audit, risk management, and compliance standards.
• Five to six years of relevant experience.
• CISM, CISSP, CompTIA Security+, ISO 27001 Lead Implementer, SSCP, ITIL, or equivalent certifications are advantageous.
• GRC platform experience and ITSM knowledge are advantageous.

Competencies

• Strong analytical and problem-solving skills.
• Effective verbal and written communication skills.
• Attention to detail in documentation and reporting.
• Team-oriented mindset with a proactive attitude.