GRC Cybersecurity Specialist - On-Site Riyadh

ES Consulting; Riyadh; Sur place; SAR 250 000 - 420 000; Plein temps

Résumé du poste

ES Consulting is seeking two Cybersecurity GRC Specialists to join our resident cybersecurity team in Riyadh, on-site with a government entity. You will develop and maintain policies, run risk assessments, and manage remediation plans end-to-end.

The role requires 6+ years of governance, risk, and compliance experience, hands-on eGRC tooling, and knowledge of NCA/ISO 27001. Saudi nationals preferred and certifications are a plus.

Qualifications

• Bachelor's degree in CS, InfoSec, or related field.
• 6+ years of cybersecurity governance, risk and compliance.
• Hands-on with eGRC tools and third-party risk management.
• Knowledge of NCA, ISO 27001 and related frameworks.
• Certifications preferred: CISSP, CISM, CRISC, or ISO 27001 Lead Implementer.

Responsabilités

• Develop and maintain cybersecurity policies, standards, and procedures.
• Run cybersecurity risk assessments across assets, systems, projects, and third parties.
• Manage the risk register and remediation plans end-to-end.
• Conduct compliance and gap assessments against NCA controls, ISO 27001, and related frameworks.
• Support internal/external audits and deliver executive dashboards and reports.

Connaissances

GRC experience

Cybersecurity governance

Risk assessments

Formation

Bachelor's degree in relevant field

Outils

eGRC tools

Third-party risk tools

Description du poste

ES Consulting is seeking two Cybersecurity GRC Specialists to join our resident cybersecurity team in Riyadh, on-site with a government entity. You will develop and maintain policies, run risk assessments, and manage remediation plans end-to-end.

The role requires 6+ years of governance, risk, and compliance experience, hands-on eGRC tooling, and knowledge of NCA/ISO 27001. Saudi nationals preferred and certifications are a plus.