GRC Consultant

Specialized Technical Services; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

A cybersecurity consulting firm is seeking a GRC Consultant responsible for developing and implementing governance, risk, and compliance frameworks. The role involves advising clients, conducting risk assessments, and ensuring compliance with regulations. Ideal candidates should have experience in cybersecurity governance and stakeholder engagement.

Responsibilities

• Advising clients on the development and implementation of cybersecurity GRC frameworks.
• Conducting comprehensive risk assessments to identify potential threats.
• Conducting compliance audits and assessments.

Job description

Our Culture

At ZainTECH we are proud of our culture and how it drives everything we do. We are looking for individuals who share our values and want to be part of a unique and engaging culture that revolves around collaboration and innovation. If you are looking for a role where you can drive engagement and excellence across teams through commitment and collaboration, and are someone who is customer-centric and appreciates an organization with uncompromised integrity that focuses on employee engagement then read on to learn more about how you can become part of the ZainTECH family.

Summary of Duties and Responsibilities

The GRC Consultant will be responsible for advising clients on the development, implementation, and improvement of their cybersecurity GRC frameworks. This role involves assessing cybersecurity risks, ensuring compliance with cybersecurity regulations, and enhancing governance structures to support secure and resilient organizational operations.

Duties/Responsibilities

Governance

• Develop and implement governance frameworks and policies to ensure effective decision-making processes.
• Advise on best practices in cybersecurity governance, including board practices, ethics, and transparency.

Risk

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities.
• Develop risk mitigation strategies and internal controls to manage and reduce risks.

Compliance

• Conduct compliance audits and assessments to evaluate organizational adherence to regulatory requirements.

Consulting Services

• Provide expert advice to clients on developing and improving their GRC frameworks and processes.
• Assist clients in implementing GRC tools and technologies.
• Prepare and present reports on the status of governance, risk, and compliance efforts to senior management and boards of directors.

Stakeholder Engagement

• Collaborate with various stakeholders, including executives, managers, and external regulators, to ensure alignment with GRC initiatives.

Continuous Improvement

• Identify opportunities for continuous improvement in GRC practices.
• Stay updated on emerging cybersecurity threats, regulatory changes, and industry trends to keep the organization ahead of potential challenges.