Cybersecurity Governance & Risk Advisor

Elm Company; Saudi Arabia; On-site; SAR 150,000 - 270,000; Full time

Job summary

Elm Company in Saudi Arabia is seeking a Consultant to lead cybersecurity governance, risk assessment, and compliance activities across the business. You will collaborate with stakeholders to strengthen controls and protect information assets.

The role demands 4-6 years of experience, a bachelor's degree in a related field, and professional certifications. You will support security monitoring, incident response, vulnerability management, and continuous improvement.

Qualifications

• Bachelor's degree in cybersecurity, information security, computer science, information technology, computer engineering or a related field.
• Professional certifications in cybersecurity, information security, risk management, governance, or related fields are preferred.

Responsibilities

• Lead assigned cybersecurity governance activities to ensure alignment with approved policies, standards, and regulatory requirements.
• Support the review and implementation of cybersecurity frameworks, procedures, and control requirements.
• Coordinate with relevant stakeholders to ensure cybersecurity requirements are understood and applied across assigned areas.
• Conduct cybersecurity risk assessments for systems, services, processes, and business initiatives.
• Identify security risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability.
• Recommend practical mitigation actions and follow up on risk treatment plans with relevant stakeholders.
• Assess the effectiveness of cybersecurity controls and identify areas requiring improvement.
• Review control implementation evidence and validate alignment with internal cybersecurity requirements.
• Support continuous improvement of control design, implementation, and monitoring practices.
• Support compliance activities related to cybersecurity regulations, internal policies, and applicable standards.
• Coordinate evidence collection, gap analysis, and remediation follow-up for cybersecurity compliance requirements.
• Prepare compliance updates, findings, and recommendations for management review.
• Provide cybersecurity guidance to business and technical teams within the assigned scope.
• Support projects and initiatives by reviewing cybersecurity requirements and advising on secure implementation practices.
• Coordinate with stakeholders to address cybersecurity concerns, clarify requirements, and support informed decision-making.
• Support cybersecurity monitoring activities by reviewing security alerts, trends, and reported incidents within the assigned scope.
• Coordinate with relevant technical teams to investigate security events and support incident response activities.
• Document findings, actions, and recommendations to strengthen detection, response, and prevention capabilities.
• Support vulnerability assessment activities by reviewing findings, prioritizing risks, and following up on remediation actions.
• Coordinate with system owners and technical teams to ensure vulnerabilities are addressed based on risk and business impact.
• Monitor emerging cybersecurity threats and contribute to awareness of risks relevant to Elm's environment.
• Prepare cybersecurity reports, dashboards, and status updates covering risks, controls, compliance, incidents, and improvement actions.
• Analyze cybersecurity performance indicators to identify trends, gaps, and opportunities for improvement.
• Contribute to initiatives that enhance cybersecurity maturity, operational resilience, and protection of information assets.
• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

Skills

Cybersecurity governance

Risk assessment

Compliance

Security monitoring

Vulnerability management

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, or a related field

Job description

Elm Company in Saudi Arabia is seeking a Consultant to lead cybersecurity governance, risk assessment, and compliance activities across the business. You will collaborate with stakeholders to strengthen controls and protect information assets.

The role demands 4-6 years of experience, a bachelor's degree in a related field, and professional certifications. You will support security monitoring, incident response, vulnerability management, and continuous improvement.