GRC Consultant (saudi only)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
HCLTech is seeking a GRC Consultant (Saudi only) to support Governance, Risk, and Compliance services. The role involves assisting with GRC assessments, preparing reports, managing ISO 27001 and SOC 2 audits, and ensuring compliance with Saudi regulations.
Key Skills for This Role
Responsibilities
- Assist in gathering and analyzing data for GRC assessments.
- Support the preparation of assessment reports, governance documentation, and client presentations.
- Lead the preparation and execution of external audits for ISO 27001 and SOC 2 (Type 1 & 2) certifications.
- Manage compliance with local Saudi regulations, specifically NCA ECC and SAMA cybersecurity frameworks.
- Collaborate with senior consultants on the development and implementation of policies, procedures, frameworks, etc.
- Develop and implement policies, procedures, and controls that ensure compliance with laws, regulations, and industry standards.
- Participate in client workshops and project meetings.
- Liaise with cross functional teams (GRC, IT, legal, audit, operations) to support secure and compliant business operations.
- Assist in the selection and implementation of GRC software solutions to automate processes and improve reporting capabilities.
- Stay informed about industry trends, regulatory changes, and emerging risks to provide proactive advice to clients.
- Evaluate third party vendors for compliance with security standards and risk management requirements.
- Provide input into enterprise risk management processes from a cybersecurity perspective.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, or related fields
- 5 6 years of relevant experience in cybersecurity, internal audit, risk management, and compliance
- Basic understanding of cybersecurity concepts, Internal Audit, Risk management, and compliance standards
- Certifications such as CISM, CISSP, CompTIA Security+, ISO 27001 Lead Implementor, SSCP, ITIL or equivalent are a plus
- Experience with GRC platforms & ITSM knowledge is a plus
Full Job Posting
Job Description
- The GRC Consultant supports the delivery of Governance, Risk, and Compliance (GRC) services, assisting senior team members in executing client projects.
Responsibilities
- Assist in gathering and analyzing data for GRC assessments.
- Support the preparation of assessment reports, governance documentation, and client presentations.
- Lead the preparation and execution of external audits for ISO 27001 and SOC 2 (Type 1 & 2) certifications.
- Manage compliance with local Saudi regulations, specifically NCA ECC and SAMA cybersecurity frameworks, also perform assessments for different frameworks (e.g., ISO 27001, NDI Controls, NCA Frameworks ECC, CSCC, DCC, TCC & OSMACC, and other best practices.
- Collaborate with senior consultants on the development and implementation of policies, procedures, frameworks, etc.
- Develop and implement policies, procedures, and controls that ensure compliance with laws, regulations, and industry standards.
- Participate in client workshops and project meetings.
- Liaise with cross functional teams (GRC, IT, legal, audit, operations) to support secure and compliant business operations.
- Assist in the selection and implementation of GRC software solutions to automate processes and improve reporting capabilities.
- Stay informed about industry trends, regulatory changes, and emerging risks to provide proactive advice to clients.
- Evaluate third party vendors for compliance with security standards and risk management requirements.
- Provide input into enterprise risk management processes from a cybersecurity perspective.
Minimum Requirements
- Bachelor's degree in Cybersecurity, Information Technology, or related fields.
- Basic understanding of cybersecurity concepts, Internal Audit, Risk management, and compliance standards along with 5 6 years of relevant experience.
- Certifications such as CISM /CISSP, CompTIA Security+, ISO 27001 Lead Implementor, SSCP & ITIL or equivalent are a plus.
- Experience with GRC platforms & ITSM knowledge is plus.
Competencies
- Strong analytical and problem solving skills.
- Effective communication skills (verbal and written).
- Attention to detail in documentation and reporting.
- Team oriented mindset with a proactive attitude.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at HCLTech
Python Engineer
Dubai, UAE
HCLTech is seeking a skilled Python Engineer to develop robust web frameworks, build backend code to serve datasets, and perform data transformations. The role requires deep understanding of Python, web development frame
Python Developer
Dubai, UAE
HCLTech is looking for a Python Engineer to develop robust web frameworks, build backend code to serve datasets, and perform data transformations. The ideal candidate should have deep understanding of Python, web develop
Business Analyst - CRM
Dubai, UAE
HCLTech is looking for a highly talented Business Analyst - CRM to lead business and functional analysis for CRM initiatives across branch, contact centre, and assisted digital journeys. The role involves translating com
Database Architect
Dubai, UAE
HCLTech is seeking a Senior Oracle DBA / Database Architect with 10-15+ years of experience for a banking domain role in Dubai. The role requires expertise in Oracle 19c/21c, RAC, ASM, Data Guard, and performance tuning,
SME - Microsoft Azure - IaaS, Azure Kubernetes Service
Queensville, CAN
HCLTech seeks an experienced SRE Business Analyst to bridge business stakeholders, operations, and engineering teams. The role involves analyzing reliability, availability, and performance, translating business requireme
SME - Microsoft Azure - IaaS, Azure Kubernetes Service
Queensville, CAN
HCLTech is seeking an experienced SRE Business Analyst to bridge the gap between business stakeholders, operations, and engineering teams. The role involves analyzing reliability and performance, translating business req
Equipment Engineer
Jeddah, KSA
HCLTech seeks an Equipment Engineer with a mechatronics or automation background to support and improve automotive stamping equipment. The role works closely with Maintenance and Process Engineering to drive equipment op
ServieNow Consultant
Abu Dhabi, UAE
HCLTech seeks an experienced ServiceNow Consultant with 8+ years of expertise to support a UAE-based banking client. The role involves gap assessment, automation, and platform optimization using ServiceNow ITSM, ITOM, an
Python Engineer
Dubai, UAE
Python Developer
Dubai, UAE
Business Analyst - CRM
Dubai, UAE
Database Architect
Dubai, UAE
SME - Microsoft Azure - IaaS, Azure Kubernetes Service
Queensville, CAN
SME - Microsoft Azure - IaaS, Azure Kubernetes Service
Queensville, CAN
Equipment Engineer
Jeddah, KSA
ServieNow Consultant
Abu Dhabi, UAE