GRC & Technology Governance Consultant

WithGrowth; Jeddah; On-site; Full time

Benefits offered by this job

Iqama sponsorship

Job summary

WithGrowth is seeking a consultant for a 5-month full-time contract in Jeddah, KSA. The role involves critical assessment of technology and control findings within a leading financial institution, requiring strong GRC expertise and engagement with various stakeholders.

Ideal candidates will hold a relevant bachelor's degree and at least one professional certification, with proven experience in information security and risk management. The position offers iqama sponsorship for immediate relocation.

Qualifications

• Bachelor's degree in information systems, computer science, finance, risk management, or related field.
• At least one active professional certification in GRC or information security.
• 2-3 years of experience in GRC, information security, technology risk, or IT audit.
• Knowledge of KSA banking technology regulations and SAMA cybersecurity framework.

Responsibilities

• Review and assess weekly GRC and technology control findings.
• Challenge inaccurate updates with evidence-based reasoning.
• Identify blockers and control gaps before they reach leadership.
• Recommend interventions with clear rationale.
• Prepare high-quality executive-level summary reports.
• Engage with stakeholders to clarify findings and verify accuracy.

Skills

GRC expertise

Information security

Technology risk management

IT audit

Advanced Excel

Advanced PowerPoint

Education

Bachelor's degree in relevant field

Job description

Jeddah, KSA

On-site · 5 days/week

5-month, full-time contract

Financial Services, Fintechs & Banking Industry

Iqama sponsorship available

Role Description

We are a boutique consulting firm engaged with a leading Saudi financial institution, supporting their technology, data, and AI governance programs.

We're looking for a sharp, detail-oriented consultant to join the team on-site in Jeddah for a 5-month full-time contract.

This is not a passive reporting role. You will be embedded in a fast-moving environment where you receive weekly observability and GRC findings from control units across technology, data, and AI functions - and your job is to think critically, not just document and report.

Role Responsibilities

• Review and critically assess weekly GRC and technology control findings submitted by internal units and control functions
• Challenge inaccurate, incomplete, or misleading updates with evidence-based reasoning
• Proactively identify blockers, control gaps, and escalation-worthy issues before they reach leadership
• Recommend pragmatic interventions and corrective actions with clear rationale
• Prepare high-quality executive-level summary reports for top leadership - concise, neat, structured, credible
• Engage with stakeholders across different business units and control functions to objectively clarify findings from multiple angles and verify accuracy

Required Skills & Qualifications

• Bachelor's degree in information systems, computer science, finance, risk management, or related field
• At least one active professional certification - CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, CDPSE, or equivalent
• Minimum 2-3 years of hands‑on experience in GRC, information security, technology risk, or IT audit - specifically within banking or financial services
• Working knowledge of KSA banking technology regulations and SAMA cybersecurity framework
• Advanced Excel and PowerPoint skills - you produce clean, structured outputs, not rough drafts
• Based in Jeddah, or willing to relocate immediately (iqama sponsorship provided)

Optional Skills & Qualifications

• Strong Arabic language ability