Cybersecurity GRC Consultant

NOZOM; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Job summary

NOZOM seeks a Cybersecurity GRC Consultant to guide governance, risk, and compliance initiatives in alignment with frameworks, regulatory requirements, and industry best practices.

The role emphasizes 3-6 years in GRC, Arabic fluency, and collaboration with stakeholders to strengthen cybersecurity maturity across client engagements.

Qualifications

• 3-6 years of experience in Cybersecurity Governance, Risk & Compliance (GRC).
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Strong knowledge of governance, risk management, compliance, and audit processes.
• Hands-on experience with NCA ECC, ISO 27001, policies, standards, and procedures.
• Experience conducting risk assessments, gap assessments, and compliance reviews.
• Experience developing and reviewing cybersecurity policies, standards, frameworks, and governance documentation.
• Arabic language proficiency is mandatory.
• Good command of English.
• Strong stakeholder management and communication skills.

Responsibilities

• Deliver cybersecurity governance, risk, and compliance activities across client engagements.
• Conduct cybersecurity risk assessments and compliance assessments against applicable frameworks and regulations.
• Develop and maintain cybersecurity policies, standards, procedures, and governance documentation.
• Support organizations in implementing and improving cybersecurity controls and compliance programs.
• Perform gap assessments and provide recommendations to address identified findings.
• Support internal and external audits and regulatory assessments.
• Prepare reports, presentations, and executive-level compliance dashboards.
• Collaborate with stakeholders to enhance cybersecurity maturity and regulatory compliance.

Skills

GRC governance

Risk assessment

Policy development

Stakeholder management

Arabic language

Education

Bachelor's degree in Cybersecurity or related field

Tools

Archer

Jithra

CyberArrow

MetricStream

Job description

We are seeking a Cybersecurity GRC Consultant to support governance, risk, and compliance initiatives, ensuring alignment with cybersecurity frameworks, regulatory requirements, and industry best practices.

Key Requirements

• 3-6 years of experience in Cybersecurity Governance, Risk & Compliance (GRC)
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field
• Strong knowledge of cybersecurity governance, risk management, compliance, and audit processes
• Hands-on experience with NCA ECC, ISO 27001, cybersecurity policies, standards, and procedures
• Experience conducting risk assessments, gap assessments, and compliance reviews
• Experience in developing and reviewing cybersecurity policies, standards, frameworks, and governance documentation
• Arabic language proficiency is mandatory
• Good command of English
• Strong stakeholder management and communication skills

Preferred Qualifications

• Experience with GRC platforms such as Archer, Jithra, CyberArrow, MetricStream, or similar solutions
• Professional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CRISC, CISA, or Security+

Key Responsibilities

• Deliver cybersecurity governance, risk, and compliance activities across client engagements
• Conduct cybersecurity risk assessments and compliance assessments against applicable frameworks and regulations
• Develop and maintain cybersecurity policies, standards, procedures, and governance documentation
• Support organizations in implementing and improving cybersecurity controls and compliance programs
• Perform gap assessments and provide recommendations to address identified findings
• Support internal and external audits and regulatory assessments
• Prepare reports, presentations, and executive-level compliance dashboards
• Collaborate with stakeholders to enhance cybersecurity maturity and regulatory compliance