GRC Principal Consultant (RE)

Innovative Solutions SA; Riyadh; On-site; SAR 280,000 - 420,000; Full time

Job summary

Innovative Solutions IS seeks a Principal GRC Consultant to lead governance, risk, and compliance initiatives for clients in the region. You will craft and implement robust risk management frameworks and provide strategic advisory services to align risk and compliance with business objectives.

Responsibilities include overseeing risk assessments, third-party risk management, regulatory alignment, and ongoing program operation.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 4+ years in governance, risk and compliance.
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead.
• Strong leadership and stakeholder management.

Responsibilities

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks and provide regular stakeholder reporting.
• Manage third-party cybersecurity risks including assessment and ongoing monitoring.
• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous tracking of compliance.
• Ensure adherence to regulatory requirements and standards (e.g., NCA, ISO 27001, NIST).
• Provide day-to-day operational support for cybersecurity risk and compliance activities.

Skills

Leadership

Communication

Stakeholder management

Risk management

Governance, risk and compliance

Education

Bachelor's degree in Cybersecurity or related field

Certifications: CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor

Tools

NCA standards awareness

Job description

Company Description

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Our mission is "Delivering secure and intelligent digital services that empower organizations"

Role Description

The Principal GRC Consultant will lead strategic initiatives focused on Governance, Risk, and Compliance. You will provide expert advisory services to clients, develop and implement robust frameworks, and guide the client in aligning their risk and compliance strategies.

Responsibilities

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks, and provide regular reporting to stakeholders.
• Manage third-party cybersecurity risks, including assessment and ongoing monitoring.
• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous compliance tracking.
• Ensure adherence to relevant regulatory requirements and standards (e.g., NCA framework).
• Provide day-to-day operational support for cybersecurity risk and compliance activities.

Requirements

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or a related field.
• 4+ years of experience in Governance, Risk, and Compliance.
• Strong knowledge of cybersecurity frameworks and standards (e.g., NCA, ISO 27001, NIST).
• Proven experience in developing and leading compliance programs.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
• Ability to work effectively with senior executives and multidisciplinary teams.
• Familiarity with AI tools and technologies.