GRC Consultant

Exequt; Riyadh; In loco; SAR 180.000 - 300.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive compensation

Exposure to high-impact projects in K–

Leadership in cybersecurity consulting

Growth-oriented culture

Descrizione del lavoro

ExeQut is seeking an experienced GRC Consultant – Enterprise & Cybersecurity to join for a 9-month project. You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices to align with business objectives and regulatory requirements.

You will lead ERM, conduct risk assessments, drive governance, and advise stakeholders on risk and compliance while ensuring alignment with cybersecurity standards.

Competenze

• 5–8+ years of GRC and information security experience.
• Experience designing and implementing enterprise GRC frameworks.
• Expertise in risk management, risk assessments and mitigations.
• Knowledge of information security governance and cybersecurity risk management.
• Familiarity with ISO27001, ISO31000, NIST CSF and COBIT.
• Regulatory compliance, internal controls and audit management.
• Strong stakeholder management and advisory skills.
• Fluent Arabic speaker.

Mansioni

• Design and implement enterprise GRC frameworks.
• Lead enterprise risk management, including risk assessments and mitigation plans.
• Develop governance policies, standards, procedures and controls.
• Drive information security governance and cybersecurity risk management.
• Conduct gap assessments, develop remediation plans and monitor compliance.
• Manage regulatory compliance, internal controls and audit activities.
• Advise stakeholders and senior management on governance, risk and compliance matters.

Conoscenze

GRC expertise

Risk management

Information security governance

Stakeholder advisory

Arabic fluency

Regulatory standards knowledge

Descrizione del lavoro

About ExeQut

ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia.

Position Summary

ExeQut is hiring an experienced, Arabic-speaking GRC Consultant – Enterprise & Cybersecurity for a 9-month project. You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices, ensuring they align with business objectives, regulatory requirements and cybersecurity standards.

What You Will Do

• Design and implement enterprise GRC frameworks
• Lead enterprise risk management (ERM), including risk assessments and mitigation plans
• Develop governance policies, standards, procedures and controls
• Drive information security governance and cybersecurity risk management
• Conduct gap assessments, develop remediation plans and monitor compliance
• Manage regulatory compliance, internal controls and audit activities
• Advise stakeholders and senior management on governance, risk and compliance matters

Required Qualifications

• 5–8+ years of relevant GRC and information security experience
• Proven experience designing and implementing enterprise GRC frameworks
• Strong expertise in enterprise risk management, risk assessments and risk mitigation
• Strong knowledge of information security governance and cybersecurity risk management
• Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT
• Experience in regulatory compliance, internal controls and audit management
• Strong stakeholder management and advisory skills
• Fluent Arabic speaker (required)

Preferred Qualifications

• Experience with Saudi regulatory frameworks such as NCA ECC, SAMA CSF or PDPL
• Certifications such as CISA, CISM, CRISC or ISO 27001 Lead Implementer/Auditor
• Experience on consulting engagements with public or private sector clients

  What We Offer

  • Competitive compensation
  • Exposure to high-impact projects with leading clients in Saudi Arabia
  • Work alongside experienced cybersecurity and consulting leadership
  • A collaborative, growth-oriented culture

  If you're a GRC specialist who turns complex regulations into clear, practical governance, we'd love to have you on board. Let's build something great together