GRC Principal Consultant

cyberani solutions; Riyadh; On-site; SAR 400,000 - 600,000; Full time

Job summary

An established industry player is seeking a Principal Consultant with extensive experience in Governance, Risk, and Compliance (GRC). This role involves leading complex GRC projects, developing tailored governance frameworks, and mentoring junior consultants. The ideal candidate will possess a strong background in cybersecurity and advanced certifications, enabling them to provide strategic insights and recommendations. Join a collaborative team that values innovation and professional growth while making a significant impact in the cybersecurity landscape. If you are passionate about driving GRC excellence and enhancing client engagement, this opportunity is perfect for you.

Qualifications

• 6-8+ years of experience in GRC consulting or related cybersecurity domain.
• Advanced certifications in cybersecurity frameworks are required.

Responsibilities

• Lead high-complexity GRC projects, including risk and compliance assessments.
• Develop governance frameworks and deliver actionable reports to clients.

Skills

GRC consulting

Risk management methodologies

Analytical skills

Communication skills

Mentoring

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Tools

ISO 27001

CRISC

CISM

CISSP

Job description

The Principal Consultant is an experienced GRC expert who provides advanced cybersecurity GRC advisory services, delivers complex client engagements, and supports the strategic execution of cybersecurity governance, risk, and compliance projects. They act as the go-to experts on niche and advanced GRC topics, contributing to both project success and team knowledge enhancement.

Responsibilities

1. Lead and execute high-complexity GRC projects, including risk assessments, compliance, and gap assessments.
2. Develop tailored governance frameworks, policies, and control environments aligned with clients' applicable regulations and preferable standards.
3. Deliver high-quality reports, presentations, and roadmaps, ensuring clarity and actionable outcomes for clients.
4. Collaborate with senior consultants to align deliverables with project objectives and timelines.
5. Act as an SME on cybersecurity frameworks, providing technical insights and recommendations to clients.
6. Develop and refine methodologies, templates, and tools to improve the delivery of GRC services.
7. Ensure projects are delivered on time, within scope, and aligned with client expectations.
8. Stay up to date with evolving regulations, industry standards, and best practices to maintain thought leadership in the GRC domain.
9. Mentor junior consultants, providing guidance on technical and professional growth.
10. Foster a collaborative and innovative culture within the team.
11. Identify opportunities to expand GRC services and contribute to business growth.

Minimum Requirements

1. Bachelor's degree in Cybersecurity, Information Technology, or related fields.
2. 6-8+ years of experience in GRC consulting or a related cybersecurity domain.
3. Advanced certifications: ISO 27001 Lead Auditor/Implementer, CRISC, CISM, CISSP, or similar.
4. Strong and deep expertise in multiple cybersecurity frameworks and risk management methodologies.
5. Excellent analytical skills, with the ability to assess complex environments and recommend practical solutions.
6. Advanced communication and presentation skills, particularly when engaging with senior stakeholders.
7. Ability to manage multiple client engagements simultaneously while maintaining high standards.
8. Collaborative mindset, with a focus on mentoring and supporting the professional growth of team members.