GRC Consultant

NuSummit Cybersecurity; Riyadh; On-site; SAR 180,000 - 320,000; Full time

Job summary

NuSummit Cybersecurity is seeking a motivated GRC Consultant with SAMA experience to support governance, risk, and compliance initiatives across client environments in Saudi Arabia. The role involves implementing governance frameworks, assessing risk, developing policies, and aiding regulatory compliance for clients in banking, government, telecom, and other regulated sectors.

The consultant will collaborate with business and technical teams, conduct risk assessments, and support audits to

Qualifications

• Knowledge of GRC principles and frameworks.
• Experience with enterprise risk management methodologies.
• Ability to develop security policies and compliance documentation.
• Strong communication with business and technical stakeholders.

Responsibilities

• Support governance frameworks and security controls using SAMA framework.
• Conduct enterprise and IT risk assessments.
• Develop and review information security policies and standards.
• Perform compliance assessments against Saudi and international cybersecurity standards.
• Support internal and external audit activities.
• Track remediation plans and closure of audit findings.
• Perform control effectiveness and maturity assessments.
• Support third-party/vendor security risk assessments.
• Maintain enterprise risk registers and compliance documentation.
• Prepare governance dashboards and executive presentations.
• Coordinate with business and technical teams to ensure regulatory compliance.
• Conduct cybersecurity governance awareness sessions.

Skills

GRC principles

Risk management

Regulatory compliance

Stakeholder communication

Job description

We are seeking a motivated GRC Consultant with SAMA experience to support governance, risk management, and compliance initiatives across client environments. The consultant will assist in implementing cybersecurity governance frameworks, conducting risk assessments, developing policies, and supporting regulatory compliance initiatives for clients across banking, government, telecom, and other regulated sectors.

Key Responsibilities

• Support implementation of cybersecurity governance frameworks and security controls using SAMA framework.
• Conduct enterprise and IT risk assessments.
• Develop and review information security policies, standards, procedures, and guidelines.
• Perform compliance assessments against Saudi and international cybersecurity standards.
• Support internal and external audit activities.
• Track remediation plans and closure of audit findings.
• Perform control effectiveness and maturity assessments.
• Support third-party/vendor security risk assessments.
• Maintain enterprise risk registers and compliance documentation.
• Prepare governance dashboards, compliance reports, and executive presentations.
• Coordinate with business and technical teams to ensure regulatory compliance.
• Conduct cybersecurity governance awareness sessions.

Required Skills

• Good understanding of Governance, Risk & Compliance (GRC) principles.
• Knowledge of enterprise risk management methodologies.
• Strong analytical, documentation, and communication skills.
• Experience developing security policies and compliance documentation.
• Ability to engage with business and technical stakeholders.