GRC Consultant

EhsanLab; Saudi Arabia; On-site; SAR 167,400 - 279,000; Full time

Benefits offered by this job

Competitive compensation aligned with market standards

Opportunity to work on high-impact regulatory projects in KSA and GCC

Exposure to leading financial institutions and fintech clients

Flexible remote / hybrid working model

A fast-growing environment with strong focus on quality, ownership, and delivery excellence

Job summary

EhsanLab in Saudi Arabia is seeking a GRC Consultant to lead governance, risk, and compliance assessments primarily in the financial and fintech sectors. The role involves assessing clients' current states, identifying gaps, and delivering effective remediation strategies. Candidates should have proven experience in GRC and cybersecurity audit, with the ability to produce executive-level reports and manage client relationships. This position offers competitive compensation and a flexible working model.

Qualifications

• Proven experience in GRC, cybersecurity audit, or compliance consulting.
• Strong understanding of risk management, control frameworks, and regulatory environments.
• Experience delivering client-facing assessments or audits independently.
• Excellent written communication with the ability to produce clear, executive-level reports.
• Strong stakeholder management and facilitation skills.
• Ability to work in a fast-paced, delivery-driven environment.

Responsibilities

• Lead GRC assessments, gap analyses, and compliance audits from scoping through to final reporting.
• Work across GCC and META regulatory frameworks, adapting to each client’s environment.
• Deliver high-quality outputs including gap assessments, control matrices, and remediation roadmaps.
• Conduct workshops, interviews, and evidence reviews with C-level, IT, and compliance stakeholders.
• Translate regulatory requirements into clear, actionable recommendations.
• Manage multiple client engagements while maintaining quality and timelines.

Skills

GRC & compliance assessment

Regulatory frameworks (KSA/GCC)

Control matrix development & reporting

Audit evidence review

Client-facing facilitation

Independent engagement ownership

Executive report writing

Stakeholder management

Pre-sales & proposal support

Education

Certifications such as CISA, CRISC, ISO 27001 Lead Auditor, or similar

Job description

About Us

EhsanLab is a leading software testing and cybersecurity company providing enterprise-grade solutions in quality assurance, penetration testing, and compliance services. We support startups, enterprises, and regulated industries in building secure, reliable, and compliant digital systems.

As part of our expansion in the Saudi Arabia and GCC markets, we are growing our Governance, Risk & Compliance (GRC) practice and looking for a skilled GRC Consultant to deliver high-impact regulatory and compliance engagements.

About the Role

As a GRC Consultant at EhsanLab, you will lead client engagements focused on governance, risk, and compliance assessments within the financial and fintech sectors.

You will work directly with clients to assess their current state, identify gaps, and deliver actionable remediation strategies aligned with regulatory expectations. This role requires ownership, strong communication, and the ability to translate complex regulations into practical, implementable controls.

Key Responsibilities

• Lead GRC assessments, gap analyses, and compliance audits from scoping through to final reporting
• Work across GCC and META regulatory frameworks, adapting to each client’s environment and maturity level
• Deliver high-quality outputs including gap assessments, control matrices, and remediation roadmaps
• Conduct workshops, interviews, and evidence reviews with C-level, IT, and compliance stakeholders
• Translate regulatory requirements into clear, actionable recommendations
• Manage multiple client engagements while maintaining quality and timelines

Required Qualifications

• Proven experience in GRC, cybersecurity audit, or compliance consulting
• Strong understanding of risk management, control frameworks, and regulatory environments
• Experience delivering client-facing assessments or audits independently
• Excellent written communication with the ability to produce clear, executive-level reports
• Strong stakeholder management and facilitation skills
• Ability to work in a fast-paced, delivery-driven environment

Key Skills

Technical / Domain

• GRC & compliance assessment
• Regulatory frameworks (KSA/GCC)
• Control matrix development & reporting
• Audit evidence review

Soft / Delivery

• Client-facing facilitation
• Independent engagement ownership
• Executive report writing
• Stakeholder management
• Pre-sales & proposal support

Nice to Have

• Experience working within KSA/GCC regulatory environments (e.g., financial sector)
• Certifications such as CISA, CRISC, ISO 27001 Lead Auditor, or similar
• Exposure to data protection or DPO-related services
• Familiarity with GRC tools or audit platforms
• Arabic language skills

What We Offer

• Competitive compensation aligned with market standards
• Opportunity to work on high-impact regulatory projects in KSA and GCC
• Exposure to leading financial institutions and fintech clients
• Flexible remote / hybrid working model
• A fast-growing environment with strong focus on quality, ownership, and delivery excellence

How to Apply

If you have a strong background in GRC and compliance consulting and are ready to work on impactful regulatory engagements, we’d love to hear from you.

Please submit your application using the form below.

Deadline: Open until filled.