GRC Specialist (NCSA Certification Support)

About Accenture

About Accenture Security

Role Overview

Grc & Cybersecurity Compliance Specialist

Key Functions

• Lead and support compliance initiatives aligned with National Cybersecurity Authority (NCSA) frameworks, with a strong focus on ECC requirements
• Perform gap assessments and map existing organizational controls against NCSA, ISO 27001, and NIST frameworks
• Drive remediation activities, track corrective actions, and ensure timely closure of identified gaps
• Prepare organizations for NCSA certification audits, internal assessments, and external regulatory reviews

Responsibilities

• Implement, maintain, and continuously improve GRC policies, standards, procedures, and control frameworks
• Conduct cybersecurity risk assessments, maintain risk registers, and support risk treatment plans
• Design, implement, and test security controls aligned with ISO 27001, NIST, and NCSA ECC requirements
• Develop and manage compliance documentation, including policies, procedures, control evidence, and audit artifacts
• Act as a primary point of contact for internal and external auditors, supporting evidence collection and audit coordination
• Collaborate with IT, security, cloud, and business stakeholders to ensure effective implementation of security controls
• Translate complex regulatory and compliance requirements into practical, technical, and operational actions
• Monitor compliance posture, prepare status reports, and present findings to stakeholders and leadership
• Track updates to NCSA regulations and assess their impact on organizational security posture
• Drive continuous improvement in control effectiveness, maturity, and overall cybersecurity governance

Qualifications

• 4 to 7 years of experience in GRC, cybersecurity compliance, or risk management
• Hands-on experience with NCSA frameworks, with ECC experience required
• Proven experience supporting audits, certifications, and regulatory assessments
• Strong understanding of risk assessment methodologies and security control frameworks
• Practical experience with ISO 27001 and NIST standards
• Ability to map and align controls across multiple regulatory and industry frameworks
• Familiarity with cloud environments (AWS, Azure, or GCP is a plus)
• Experience using GRC tools such as Archer, ServiceNow GRC, or similar platforms
• Strong documentation, reporting, and evidence management skills
• Ability to work independently and own deliverables end-to-end
• Fluency in Arabic and English is mandatory.
• To learn more about life @AccentureMiddleEast, follow us on social media and keep up with our latest news .Accenture Middle East Africa : LinkedIn, Instagram, Facebook, Twitter, YouTube
• .