GRC Consultant – Immediate Hiring

Securseed; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

An established industry player is seeking a skilled information security professional to lead risk management and compliance efforts in cloud services. This role involves refining risk strategies, identifying technological gaps, and overseeing risk assessments in large-scale computing environments. The ideal candidate will possess strong communication skills and a deep understanding of security compliance and risk management frameworks. Join a dynamic team that values innovation and expertise, where your contributions will drive significant improvements in security practices and business outcomes. If you're ready to make a meaningful impact in the field of information security, this opportunity is for you.

Qualifications

• 3-6 years of experience in information security, audit, or risk management.
• Subject matter expert in risk management and technical frameworks.

Responsibilities

• Refine risk management strategies and assess security risks.
• Develop dashboards and reports for risk management.
• Continuously improve the risk management program.

Skills

Information Security Management

Risk Management

Business Risk Analysis

Communication Skills

Technical Frameworks Knowledge

Problem Solving

Education

Bachelor’s degree in Management Information Systems

Master's degree in Business Administration

Tools

IT-GRC tools

Risk Management Tools

Job description

Job description

This role will specialize in all aspects of information security management and business and regulatory compliance using cloud services in large-scale computing environments.

Responsibilities

• Refine risk management strategies to ensure key security risks are captured and actioned.
• Identify gaps in technological architectures and systems controls, and develop solutions to remediate those gaps.
• Assess the risk from security deviations and exceptions.
• Dive deep with threat modeling and data flows.
• Oversee the execution of risk assessments for security and technology risks.
• Identify gaps in controls and processes.
• Develop and deliver risk and finding dashboards and reporting.
• Oversee and manage risk management tools.
• Implement automated risk scoring where possible.
• Continuously improve the program and recommend improvements to drive program efficiencies.
• Maintain subject matter expertise in security risk and control.

Qualifications

• Bachelor’s degree in Management Information Systems, Computer Science, or related field, or relevant industry experience.
• 3-6 years of information security, audit, risk management, compliance, or risk consulting experience.
• Excellent written and verbal communication skills.
• Subject matter expert in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
• In-depth knowledge of security compliance, risk management, and technical frameworks.
• Maturity, judgment, and proven ability to lead and influence others.
• Independently driven, resourceful, and able to deliver results with minimal direction.
• High sense of ownership, urgency, and drive.
• Leadership-level communication (written and verbal).

Preferred Qualifications

• Master's degree in Business Administration, Information Systems, related field, or equivalent practical experience.
• Experience working with engineers and architects.
• Relevant industry certifications (CISSP, CISA, etc.).
• Experience working with IT-GRC tools.
• Experience implementing automated risk scoring.
• Experience working with IT-Risk Frameworks (NIST, ISO-27X, etc.).

Job Location: Saudi Arabia

No of Positions: 2

Note: The candidate would be expected to work in diverse consulting engagements and be willing to travel to Middle East countries for project execution at least 50% of their time.

Preference will be given to candidates who can join immediately or within 15 days at the maximum.

Employment Type: Full-time

Industry

• Information Technology & Services