Cybersecurity GRC Specialist: Policy, Risk & Compliance

Cloud Consultancy - CCDS; Riyadh; On-site; SAR 180,000 - 240,000; Part time

Job summary

Cloud Consultancy - CCDS is seeking a seasoned cybersecurity governance, risk and compliance professional to support a government entity in Riyadh. You will oversee policies, risk assessments, and executive reporting for a 13-month project, aligning actions with the organization’s risk appetite and regulatory expectations.

Responsibilities include audits, evidence preparation, third-party risk oversight, and implementation of eGRC tools, with collaboration across senior leadership and multiple

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 6 years of experience in cybersecurity governance, risk, and compliance.
• Advanced knowledge of Saudi and international cybersecurity frameworks and standards, including NCA controls and ISO/IEC 27001.
• Proven experience with cybersecurity risk registers, treatment plans, third-party risk, executive reporting, and eGRC tools.

Responsibilities

• Review and periodically update cybersecurity policies, procedures, standards, and guidelines.
• Perform cybersecurity risk assessments covering assets, systems, projects, and third parties.
• Maintain the cybersecurity risk register, develop treatment plans, track actions, and align decisions with the entity's approved risk appetite.
• Conduct compliance gap assessments against NCA controls, ISO/IEC 27001, and other applicable national or international frameworks.
• Support internal and external audits, prepare evidence, manage non-compliance cases, and follow remediation through closure.
• Operate or support eGRC and cybersecurity risk-management tools.
• Prepare management reports, executive dashboards, KPIs, compliance status reports, and committee-level presentations.

Skills

Stakeholder management

Analytical skills

Presentation skills

Documentation skills

Education

Bachelor's degree in Computer Science or Information Security

Tools

eGRC tools

Job description

Cloud Consultancy - CCDS is seeking a seasoned cybersecurity governance, risk and compliance professional to support a government entity in Riyadh. You will oversee policies, risk assessments, and executive reporting for a 13-month project, aligning actions with the organization’s risk appetite and regulatory expectations.

Responsibilities include audits, evidence preparation, third-party risk oversight, and implementation of eGRC tools, with collaboration across senior leadership and multiple