Cybersecurity Risk and Compliance Specialist

Accenture Middle East; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Accenture Middle East is seeking a seasoned cybersecurity governance, risk and compliance professional to support our clients in the Saudi market. The role emphasizes adherence to national standards and collaboration with SITE teams in a multi-stakeholder environment.

The ideal candidate has 4+ years of GRC experience, strong communication, and the ability to articulate complex concepts with discretion and diplomacy, in a fast-paced, professional setting.

Qualifications

• Bachelor's degree or higher in cybersecurity-related field.
• Minimum 4+ years in cybersecurity governance, risk, and compliance (GRC).
• Saudi national due to nationality requirement.
• Familiarity with Saudi frameworks (ECC, CSCC, DCC, CCC, OTCC, NCS, NDMO, PDPL) and international standards (ISO/IEC 27001, NIST, CIS Controls, PCI DSS, GDPR).
• Certifications preferred: ISO/IEC 27001 Lead Auditor/Lead Implementer, GCCC, CISSP, CISM, CISA; candidates pursuing certifications welcome.

Skills

Excellent communication skills

Stakeholder management

GRC knowledge

Discretion and confidentiality

Education

Bachelor's degree in Cybersecurity / Information Systems / Computer Science / Computer Engineering

Job description

Resource Requirements (Primary Focus: L2 & L3) Nationality Requirement Must be a Saudi National Educational Background: Bachelor's degree or higher in: o Cybersecurity o Information Systems o Computer Science o Computer Engineering o or a related field Professional Experience Minimum 4+ years of professional experience in Cybersecurity Governance, Risk, and Compliance (GRC) Preference for: o L2 Consultants: 5-8 years of experience o L3 Consultants: 9-12 years of experience (as per the attached resource level definitions) Knowledge of Cybersecurity Standards National Standards Strong practical experience with Saudi national cybersecurity frameworks and regulations, including but not limited to: o NCA Essential Cybersecurity Controls (ECC) o CSCC, DCC, CCC, OTCC o National Cybersecurity Strategy (NCS) o National Data Management Office (NDMO) o Personal Data Protection Law (PDPL) International Standards Good working knowledge of international frameworks and standards such as: o ISO/IEC 27001 o NIST o CIS Controls o PCI DSS o GDPR Certifications One or more relevant certifications are preferred, including: o ISO/IEC 27001 Lead Auditor / Lead Implementer o GCCC o CISSP o CISM o CISA Candidates actively pursuing relevant certifications are also welcome. Communication & Professional Conduct Strong communication skills, with the ability to clearly articulate complex cybersecurity concepts to diverse stakeholders Proven ability to collaborate effectively within a multi stakeholder environment (e.g., SITE teams) High standards of professionalism, customer engagement, and confidentiality Ability to handle sensitive situations with discretion and diplomacy