GRC Cybersecurity Consultant — Riyadh, ISO/NIST Focus

CCDS; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Benefits offered by this job

Medical Insurance

Paid Time Off

Training & Development

Performance Bonus

Job summary

CCDS is seeking a cybersecurity GRC professional to strengthen governance, risk, and compliance across client environments. You will develop and maintain policies, conduct risk assessments, and coordinate audits in line with SAMA and NCA requirements.

The role requires a Bachelor’s degree, 3+ years of GRC experience, and certifications such as CISM, CISA, CRISC, or ISO 27001 Lead Implementer. You will collaborate with technical teams and report to stakeholders to drive measurable risk reduction.

Qualifications

• 3+ years of experience in cybersecurity GRC, risk, or compliance roles.
• Experience conducting compliance audits, risk assessments, and control gap analyses.
• Strong knowledge of ISO 27001 and NIST frameworks.
• Experience presenting governance or risk reports to leadership and coordinating with auditors.

Responsibilities

• Develop and maintain cybersecurity GRC policies, standards, and control procedures.
• Conduct risk assessments and gap analyses against SAMA and NCA requirements.
• Coordinate compliance audits and track remediation of identified control deficiencies.
• Prepare governance reports, risk dashboards, and compliance documentation for stakeholders.
• Collaborate with technical teams to implement and monitor security controls effectively.

Skills

GRC expertise

Risk assessment

Compliance reporting

Auditing coordination

Education

Bachelor’s degree in Cybersecurity, Information Technology, or a related field

Tools

ISO 27001

NIST frameworks

SAMA/NCA requirements knowledge

CISM certification

CISA certification

CRISC certification

ISO 27001 Lead Implementer

Job description

CCDS is seeking a cybersecurity GRC professional to strengthen governance, risk, and compliance across client environments. You will develop and maintain policies, conduct risk assessments, and coordinate audits in line with SAMA and NCA requirements.

The role requires a Bachelor’s degree, 3+ years of GRC experience, and certifications such as CISM, CISA, CRISC, or ISO 27001 Lead Implementer. You will collaborate with technical teams and report to stakeholders to drive measurable risk reduction.