GRC Consultant

ExeQut AI Consulting; Riyadh; In loco; SAR 180.000 - 260.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive compensation

High-impact projects in Saudi Arabia

Leadership collaboration

Growth culture

Descrizione del lavoro

ExeQut AI Consulting is seeking an experienced Arabic-speaking GRC Consultant to design and implement enterprise GRC frameworks for a 9-month project in the Kingdom of Saudi Arabia. The role focuses on governance, risk management and regulatory compliance across public and private sectors.

You will lead risk assessments, develop policies and controls, and advise senior management on governance matters while ensuring alignment with business objectives and standards such as ISO 27001, NIST CSF and

Competenze

• 5–8+ years of relevant GRC and information security experience.
• Proven experience designing and implementing enterprise GRC frameworks.
• Strong expertise in enterprise risk management, risk assessments and risk mitigation.
• Strong knowledge of information security governance and cybersecurity risk management.
• Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT.
• Experience in regulatory compliance, internal controls and audit management.
• Strong stakeholder management and advisory skills.
• Fluent Arabic speaker (required)

Mansioni

• Design and implement enterprise GRC frameworks.
• Lead enterprise risk management (ERM) including risk assessments and mitigation plans.
• Develop governance policies, standards, procedures and controls.
• Drive information security governance and cybersecurity risk management.
• Conduct gap assessments, develop remediation plans and monitor compliance.
• Manage regulatory compliance, internal controls and audit activities.
• Advise stakeholders and senior management on governance, risk and compliance matters

Conoscenze

GRC expertise

Enterprise risk management

Information security governance

Regulatory knowledge

Stakeholder management

Arabic language

Formazione

Bachelor’s degree or equivalent in a relevant field

CISA

CISM

CRISC

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Descrizione del lavoro

About ExeQut

ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity IAM cloud AI-driven platforms and custom software engineering We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia

Position Summary

ExeQut is hiring an experienced Arabic-speaking GRC Consultant Enterprise & Cybersecurity for a 9-month project. You will develop and implement enterprise-level GRC frameworks policies procedures and security governance practices ensuring they align with business objectives regulatory requirements and cybersecurity standards

What You Will Do

• Design and implement enterprise GRC frameworks
• Lead enterprise risk management ERM including risk assessments and mitigation plans
• Develop governance policies standards procedures and controls
• Drive information security governance and cybersecurity risk management
• Conduct gap assessments develop remediation plans and monitor compliance
• Manage regulatory compliance internal controls and audit activities
• Advise stakeholders and senior management on governance risk and compliance matters

Preferred Qualifications

• Experience with Saudi regulatory frameworks such as NCA ECC SAMA CSF or PDPL
• Certifications such as CISA CISM CRISC or ISO 27001 Lead Implementer Auditor
• Experience on consulting engagements with public or private sector clients

What We Offer

• Competitive compensation
• Exposure to high-impact projects with leading clients in Saudi Arabia
• Work alongside experienced cybersecurity and consulting leadership
• A collaborative growth-oriented culture

If you re a GRC specialist who turns complex regulations into clear practical governance we d love to have you on board Let s build something great together

• 5 8+ years of relevant GRC and information security experience
• Proven experience designing and implementing enterprise GRC frameworks
• Strong expertise in enterprise risk management, risk assessments and risk mitigation
• Strong knowledge of information security governance and cybersecurity risk management
• Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT
• Experience in regulatory compliance, internal controls and audit management
• Strong stakeholder management and advisory skills
• Fluent Arabic speaker (required)