Cybersecurity GRC Consultant
On-siteRiyadh, Riyadh Region, Saudi Arabia
Job Summary
Design and maintain cybersecurity governance frameworks, policies, standards, and procedures while ensuring alignment with Saudi regulations such as NCA ECC, SAMA, and ISO/IEC 27001. Conduct maturity assessments, gap analyses, and benchmarking against industry best practices to drive continuous improvement. Collaborate with senior consultants, architects, and client stakeholders to develop operating models, RACI matrices, and KPI dashboards. Facilitate governance committees and workshops, prepare documentation and recommendations, and provide advisory support on compliance requirements. Review deliverables for quality assurance and track action items to ensure integrated governance across Risk, Compliance, and Architecture teams.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline
- 3–7 years of experience in Cybersecurity Governance, Risk & Compliance (GRC), Information Security, or Cybersecurity Consulting
- Experience in developing governance documentation, policies, standards, and cybersecurity frameworks
- Familiarity with cybersecurity governance operating models and organizational structures
- Experience supporting governance assessments, compliance initiatives, and regulatory audits
- Knowledge of Saudi cybersecurity regulations and international security standards
Desired Qualifications
- Experience working within consulting, managed services, or large enterprise environments
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.