GRC Principal Consultant (RE)

Innovative Solutions; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

Innovative Solutions is seeking a Principal GRC Consultant to lead governance, risk and compliance initiatives for clients. The role focuses on advisory services, framework development, and guiding clients to align risk and compliance strategies with regulatory requirements.

The position requires 4+ years in GRC, strong knowledge of frameworks (NCA, ISO 27001, NIST), and excellent leadership and stakeholder management skills, with experience engaging senior executives and cross-functional teams.

Qualifications

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or related field.
• 4+ years of Governance, Risk, and Compliance experience.
• Strong knowledge of cybersecurity frameworks and standards (NCA, ISO 27001, NIST).
• Proven experience in developing and leading compliance programs.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications (CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).

Responsibilities

• Lead governance, risk, and compliance initiatives for clients.
• Develop and implement robust risk and compliance frameworks.
• Advise clients on aligning risk and compliance with regulatory requirements.
• Perform annual risk assessments and track remediation efforts.
• Engage with senior executives and multidisciplinary teams.
• Provide day-to-day operational support for risk and compliance activities.

Skills

Governance & Risk

Regulatory compliance

Cybersecurity frameworks

Stakeholder management

Leadership

AI tools familiarity

Education

Bachelor's degree in Cybersecurity, Risk Management, Information Security, or related field

Tools

CISSP

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

Company Description

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Our mission is "Delivering secure and intelligent digital services that empower organizations"

Role Description

The Principal GRC Consultant will lead strategic initiatives focused on Governance, Risk, and Compliance. You will provide expert advisory services to clients, develop and implement robust frameworks, and guide the client in aligning their risk and compliance strategies.

Responsibilities

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks, and provide regular reporting to stakeholders.
• Manage third-party cybersecurity risks, including assessment and ongoing monitoring.
• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous compliance tracking.
• Ensure adherence to relevant regulatory requirements and standards (e.g., NCA framework).
• Provide day-to-day operational support for cybersecurity risk and compliance activities.

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or a related field.
• 4+ years of experience in Governance, Risk, and Compliance.
• Strong knowledge of cybersecurity frameworks and standards (e.g., NCA, ISO 27001, NIST).
• Proven experience in developing and leading compliance programs.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
• Ability to work effectively with senior executives and multidisciplinary teams.
• Familiarity with AI tools and technologies.