GRC Consultant (SAMA) - Cybersecurity Governance & Risk

NuSummit Cybersecurity; Riyadh; On-site; SAR 180,000 - 320,000; Full time

Job summary

NuSummit Cybersecurity is seeking a motivated GRC Consultant with SAMA experience to support governance, risk, and compliance initiatives across client environments in Saudi Arabia. The role involves implementing governance frameworks, assessing risk, developing policies, and aiding regulatory compliance for clients in banking, government, telecom, and other regulated sectors.

The consultant will collaborate with business and technical teams, conduct risk assessments, and support audits to

Qualifications

• Knowledge of GRC principles and frameworks.
• Experience with enterprise risk management methodologies.
• Ability to develop security policies and compliance documentation.
• Strong communication with business and technical stakeholders.

Responsibilities

• Support governance frameworks and security controls using SAMA framework.
• Conduct enterprise and IT risk assessments.
• Develop and review information security policies and standards.
• Perform compliance assessments against Saudi and international cybersecurity standards.
• Support internal and external audit activities.
• Track remediation plans and closure of audit findings.
• Perform control effectiveness and maturity assessments.
• Support third-party/vendor security risk assessments.
• Maintain enterprise risk registers and compliance documentation.
• Prepare governance dashboards and executive presentations.
• Coordinate with business and technical teams to ensure regulatory compliance.
• Conduct cybersecurity governance awareness sessions.

Skills

GRC principles

Risk management

Regulatory compliance

Stakeholder communication

Job description

NuSummit Cybersecurity is seeking a motivated GRC Consultant with SAMA experience to support governance, risk, and compliance initiatives across client environments in Saudi Arabia. The role involves implementing governance frameworks, assessing risk, developing policies, and aiding regulatory compliance for clients in banking, government, telecom, and other regulated sectors.

The consultant will collaborate with business and technical teams, conduct risk assessments, and support audits to