Senior Cybersecurity GRC Consultant - ISO, NIST & Audits

TIS; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A Managed Cybersecurity Services Provider in Saudi Arabia is looking for a Cybersecurity GRC Consultant. You will ensure compliance with key cybersecurity standards, conduct risk assessments, and develop controls and policies. Ideal candidates will have 7+ years in information security and familiarity with Saudi regulatory requirements. This role requires strong technical writing, project management skills, and the ability to work in complex environments.

Qualifications

• Minimum 7 years of information security experience.
• At least 5 years in a Cybersecurity GRC role.
• Hands-on experience with Saudi National Cybersecurity Authority requirements.

Responsibilities

• Manage compliance with international risk and security standards.
• Conduct technical risk assessments.
• Develop cybersecurity controls and policies for governance.

Skills

Risk mitigation principles

Technical risk assessments

Cybersecurity controls development

Audit remediation analysis

GRC platform implementation

Regulatory standards knowledge

Education

Bachelor’s degree in IT or related field

Tools

GRC platforms

Job description

A Managed Cybersecurity Services Provider in Saudi Arabia is looking for a Cybersecurity GRC Consultant. You will ensure compliance with key cybersecurity standards, conduct risk assessments, and develop controls and policies. Ideal candidates will have 7+ years in information security and familiarity with Saudi regulatory requirements. This role requires strong technical writing, project management skills, and the ability to work in complex environments.