Cyber Risk Strategy Manager | GRC & Risk Frameworks

Deloitte Development LLC; Riyadh; On-site; SAR 300,000 - 520,000; Full time

Job summary

Deloitte in Saudi Arabia is seeking a Consultant – Manager, Cyber Operate, Cybersecurity Risk Specialist to lead risk design and governance across enterprise IT and critical infra. You will define the risk framework, assess top cyber risks, oversee treatment plans and produce clear reports for management and risk committees.

4–8 years’ experience and a Bachelor’s in cybersecurity or related field are required; Arabic language is preferred.

Qualifications

• 4–8 years of experience in cyber risk management or related field.
• Bachelor's degree in cybersecurity, IT, risk management or related field.
• Familiarity with ISO/IEC 27005, NIST SP 800-30, ISO 31000 and NCA ECC.
• Experience with GRC platforms (Archer, ServiceNow IRM, MetricStream) preferred.

Responsibilities

• Define the cyber risk management framework and methodology.
• Assess top cyber risks across the enterprise and with project teams.
• Maintain risk treatments, KRIs, and risk registers with owners and timelines.
• Produce risk reports and heat maps for management and risk committees.

Skills

Cyber risk management

Risk assessment

Policy & governance

Education

Bachelor's degree in cybersecurity, IT, risk management or related field

Tools

Archer

ServiceNow IRM

MetricStream

Job description

Deloitte in Saudi Arabia is seeking a Consultant – Manager, Cyber Operate, Cybersecurity Risk Specialist to lead risk design and governance across enterprise IT and critical infra. You will define the risk framework, assess top cyber risks, oversee treatment plans and produce clear reports for management and risk committees.

4–8 years’ experience and a Bachelor’s in cybersecurity or related field are required; Arabic language is preferred.