GRC Consultant

Specialized Technical Services – STS; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology firm in the Riyadh region seeks a GRC Consultant to drive cybersecurity governance, risk, and compliance initiatives. This role involves advising clients on GRC frameworks, conducting risk assessments, and improving compliance strategies. Candidates should possess significant experience in risk management and hold relevant qualifications like CISSP or CISA, along with a degree in a related field.

Qualifications

• Proven experience in risk management, compliance, audit, or governance roles.
• Demonstrated experience in conducting risk assessments and compliance audits.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CCEP are highly desirable.

Responsibilities

• Advise clients on the development and improvement of cybersecurity GRC frameworks.
• Conduct comprehensive risk assessments to identify potential threats.
• Collaborate with stakeholders to align GRC initiatives.

Skills

Risk management

Compliance audits

Cybersecurity frameworks

Stakeholder engagement

Education

Bachelor's or Master’s degree in a related field

Tools

GRC tools and technologies

Job description

Our Culture:

At ZainTECH we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the ZainTECH family.

Summary of Duties and Responsibilities:

The GRC Consultant will be responsible for advising clients on the development, implementation, and improvement of their cybersecurity GRC frameworks. This role involves assessing cybersecurity risks, ensuring compliance with cybersecurity regulations, and enhancing governance structures to support secure and resilient organizational operations.

Duties/Responsibilities:

Governance

• Develop and implement governance frameworks and policies to ensure effective decision-making processes.


• Advise on best practices in cybersecurity governance, including board practices, ethics, and transparency.

Risk

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities.


• Develop risk mitigation strategies and internal controls to manage and reduce risks.

Compliance

• Conduct compliance audits and assessments to evaluate organizational adherence to regulatory requirements.

Consulting Services

• Provide expert advice to clients on developing and improving their GRC frameworks and processes.


• Assist clients in implementing GRC tools and technologies.


• Prepare and present reports on the status of governance, risk, and compliance efforts to senior management and boards of directors.

Stakeholder Engagement

• Collaborate with various stakeholders, including executives, managers, and external regulators, to ensure alignment with GRC initiatives.

Continuous Improvement

• Identify opportunities for continuous improvement in GRC practices.


• Stay updated on emerging cybersecurity threats, regulatory changes, and industry trends to keep the organization ahead of potential challenges.

Qualifications

• Proven experience in risk management, compliance, audit, or governance roles.


• Demonstrated experience in conducting risk assessments and compliance audits.


• Bachelor’s or Master’s degree in Business, Cybersecurity, Information Technology, Business, Law, or a related field.


• Relevant certifications such as CISSP, CISM, CRISC, CISA, or CCEP are highly desirable.