GRC Principal Consultant: Cybersecurity Risk & Compliance

Innovative Solutions; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

Innovative Solutions is seeking a Principal GRC Consultant to lead governance, risk and compliance initiatives for clients. The role focuses on advisory services, framework development, and guiding clients to align risk and compliance strategies with regulatory requirements.

The position requires 4+ years in GRC, strong knowledge of frameworks (NCA, ISO 27001, NIST), and excellent leadership and stakeholder management skills, with experience engaging senior executives and cross-functional teams.

Qualifications

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or related field.
• 4+ years of Governance, Risk, and Compliance experience.
• Strong knowledge of cybersecurity frameworks and standards (NCA, ISO 27001, NIST).
• Proven experience in developing and leading compliance programs.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications (CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).

Responsibilities

• Lead governance, risk, and compliance initiatives for clients.
• Develop and implement robust risk and compliance frameworks.
• Advise clients on aligning risk and compliance with regulatory requirements.
• Perform annual risk assessments and track remediation efforts.
• Engage with senior executives and multidisciplinary teams.
• Provide day-to-day operational support for risk and compliance activities.

Skills

Governance & Risk

Regulatory compliance

Cybersecurity frameworks

Stakeholder management

Leadership

AI tools familiarity

Education

Bachelor's degree in Cybersecurity, Risk Management, Information Security, or related field

Tools

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

Innovative Solutions is seeking a Principal GRC Consultant to lead governance, risk and compliance initiatives for clients. The role focuses on advisory services, framework development, and guiding clients to align risk and compliance strategies with regulatory requirements.

The position requires 4+ years in GRC, strong knowledge of frameworks (NCA, ISO 27001, NIST), and excellent leadership and stakeholder management skills, with experience engaging senior executives and cross-functional teams.