Cybersecurity GRC Consultant

Devoteam; Riyadh; On-site; SAR 167,400 - 223,200; Full time

Job summary

Devoteam is seeking a Cybersecurity GRC Consultant based in Riyadh, Saudi Arabia. The role focuses on supporting the design, implementation, and continuous improvement of cybersecurity governance and compliance initiatives. Candidates should have 3–7 years of experience in Cybersecurity Governance, Risk & Compliance.

Key responsibilities include supporting governance frameworks and ensuring alignment with Saudi regulatory guidelines. The position offers opportunities to work closely with clients and senior consultants, contributing to high-quality governance artifacts.

Qualifications

• 3–7 years of experience in Cybersecurity Governance, Risk & Compliance.
• Experience in developing governance documentation and cybersecurity frameworks.
• Knowledge of Saudi cybersecurity regulations and international standards.

Responsibilities

• Support the development of the cybersecurity governance framework.
• Assist in improving cybersecurity governance operating models.
• Prepare governance documentation and reports.

Skills

Cybersecurity Governance

Risk Management

Compliance

Regulatory Knowledge

Documentation

Education

Bachelor's degree in Cybersecurity or related discipline

Job description

Devoteam Culture & Values:

True innovation is born from a powerful culture, fused with meaningful values.

Culture:

Fair and courageous Everyone is treated fairly – this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.

Ambition and results Ambition is nurtured at every step – this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.

Learning and innovating Curiosity and learning are at our core – this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.

Caring and sharing A caring attitude is infused into our culture – this encourages sharing. We believe in the power of teams, we promote support and collaboration. At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers.

Values:

• Respect
• Frankness
• Passion

Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.

To know more about us, please visit: www.devoteam.com

The Cybersecurity GRC Consultant supports the design, implementation, and continuous improvement of cybersecurity governance, risk, and compliance initiatives. The role contributes to the development of governance frameworks, policies, operating models, and regulatory compliance activities while ensuring alignment with organizational objectives and Saudi cybersecurity regulations. The consultant works closely with senior consultants, architects, and client stakeholders to deliver high-quality governance artifacts and advisory services.

Key Responsibilities

• Support the development, implementation, and maintenance of the cybersecurity governance framework, including policies, standards, procedures, and guidelines.
• Assist in designing and improving cybersecurity governance operating models, organizational structures, and RACI matrices.
• Contribute to the development and maintenance of governance-related KPIs, KRIs, dashboards, and reporting mechanisms.
• Perform governance maturity assessments, gap analyses, and benchmarking activities against industry best practices.
• Prepare governance documentation, reports, presentations, and recommendations for client review.
• Ensure governance deliverables align with Saudi regulatory requirements, including NCA ECC, CST (formerly CITC), SAMA Cybersecurity Framework, and relevant international standards such as ISO/IEC 27001 and NIST Cybersecurity Framework.
• Support governance committees, working groups, and client workshops by preparing documentation, facilitating discussions, and tracking action items.
• Collaborate with Risk Management, Compliance, Third-Party Risk Management (TPRM), Enterprise Architecture, and Security Operations teams to ensure governance activities are integrated across cybersecurity domains.
• Assist in the review and quality assurance of governance documentation and project deliverables.
• Monitor regulatory updates and industry trends to recommend improvements to governance practices.
• Provide advisory support to clients on cybersecurity governance best practices and regulatory compliance requirements.
• Contribute to knowledge sharing, documentation, and continuous improvement initiatives within the Cybersecurity GRC practice.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.
• 3–7 years of experience in Cybersecurity Governance, Risk & Compliance (GRC), Information Security, or Cybersecurity Consulting.
• Experience in developing governance documentation, policies, standards, and cybersecurity frameworks.
• Familiarity with cybersecurity governance operating models and organizational structures.
• Experience supporting governance assessments, compliance initiatives, and regulatory audits.
• Knowledge of Saudi cybersecurity regulations and international security standards.
• Experience working within consulting, managed services, or large enterprise environments is preferred.

Business Unit: Strategy & Transformation