Cybersecurity GRC Specialist

ES Consulting; Riyadh; On-site; SAR 250,000 - 420,000; Full time

Job summary

ES Consulting is seeking two Cybersecurity GRC Specialists to join our resident cybersecurity team in Riyadh, on-site with a government entity. You will develop and maintain policies, run risk assessments, and manage remediation plans end-to-end.

The role requires 6+ years of governance, risk, and compliance experience, hands-on eGRC tooling, and knowledge of NCA/ISO 27001. Saudi nationals preferred and certifications are a plus.

Qualifications

• Bachelor's degree in CS, InfoSec, or related field.
• 6+ years of cybersecurity governance, risk and compliance.
• Hands-on with eGRC tools and third-party risk management.
• Knowledge of NCA, ISO 27001 and related frameworks.
• Certifications preferred: CISSP, CISM, CRISC, or ISO 27001 Lead Implementer.

Responsibilities

• Develop and maintain cybersecurity policies, standards, and procedures.
• Run cybersecurity risk assessments across assets, systems, projects, and third parties.
• Manage the risk register and remediation plans end-to-end.
• Conduct compliance and gap assessments against NCA controls, ISO 27001, and related frameworks.
• Support internal/external audits and deliver executive dashboards and reports.

Skills

GRC experience

Cybersecurity governance

Risk assessments

Education

Bachelor's degree in relevant field

Tools

eGRC tools

Third-party risk tools

Job description

We're Hiring | Cybersecurity GRC Specialist — 2 Openings (Saudi Nationals Only)

We are looking for two GRC Specialists to join our resident cybersecurity team supporting a leading government entity in Riyadh (on-site).

What you'll do:

• Develop and maintain cybersecurity policies, standards, and procedures
• Run cybersecurity risk assessments across assets, systems, projects, and third parties
• Manage the risk register and remediation plans end-to-end
• Conduct compliance and gap assessments against NCA controls, ISO 27001, and related frameworks
• Support internal/external audits and deliver executive dashboards and reports

What we're looking for:

• Bachelor's degree in Computer Science, Information Security, or related field
• 6+ years of experience in cybersecurity governance, risk, and compliance
• Hands-on experience with eGRC tools and third-party risk management
• Strong knowledge of national (NCA) and international cybersecurity frameworks
• Certifications preferred: CISSP, CISM, CRISC, or ISO 27001 Lead Implementer

#Hiring #Cybersecurity #GRC #Riyadh #SaudiArabia #InfoSec