GRC Consultant

Help AG; Riyadh; On-site; SAR 120,000 - 200,000; Full time

Job summary

Help AG in Saudi Arabia is seeking a GRC Consultant to support governance, risk, and compliance initiatives, including risk assessments, compliance reviews, policy development, and ISO 27001 implementation.

The ideal candidate has 1-4 years in GRC or information security, with knowledge of ISO 27001 and regulatory frameworks such as NCA ECC, SAMA CSF, and PDPL, plus strong communication, documentation, and analytical skills.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 1-4 years of experience in GRC, information security, risk management, or IT audit.
• Knowledge of ISO 27001, NCA ECC, risk management, and compliance frameworks.
• Strong communication, documentation, and analytical skills.

Responsibilities

• Support governance, risk, and compliance initiatives.
• Conduct risk assessments and compliance reviews.
• Develop and maintain security policies and procedures.
• Assist with ISO 27001 implementation and ongoing improvements.

Skills

GRC

Risk assessment

Policy development

Regulatory knowledge

Communication

Documentation

Analytical skills

Education

Bachelor's degree

Tools

ISO 27001

NCA ECC

SAMA CSF

PDPL

Job description

Seeking a GRC Consultant to support governance, risk, and compliance initiatives, including risk assessments, compliance reviews, policy development, and ISO 27001 implementation. The role involves working with cybersecurity frameworks and regulatory requirements such as NCA ECC, SAMA CSF, and PDPL.

Requirements:

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 1-4 years of experience in GRC, information security, risk management, or IT audit.
• Knowledge of ISO 27001, NCA ECC, risk management, and compliance frameworks.
• Strong communication, documentation, and analytical skills.

Preferred Certifications:

• GRCP
• ISO 27001 Lead Implementer and/or Lead Auditor
• Additional certifications such as CISA, CRISC