Senior GRC Consultant: Cyber Risk & Compliance Strategy

Innovative Solutions SA; Riyadh; On-site; SAR 280,000 - 420,000; Full time

Job summary

Innovative Solutions IS seeks a Principal GRC Consultant to lead governance, risk, and compliance initiatives for clients in the region. You will craft and implement robust risk management frameworks and provide strategic advisory services to align risk and compliance with business objectives.

Responsibilities include overseeing risk assessments, third-party risk management, regulatory alignment, and ongoing program operation.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• 4+ years in governance, risk and compliance.
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead.
• Strong leadership and stakeholder management.

Responsibilities

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks and provide regular stakeholder reporting.
• Manage third-party cybersecurity risks including assessment and ongoing monitoring.
• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous tracking of compliance.
• Ensure adherence to regulatory requirements and standards (e.g., NCA, ISO 27001, NIST).
• Provide day-to-day operational support for cybersecurity risk and compliance activities.

Skills

Leadership

Communication

Stakeholder management

Risk management

Governance, risk and compliance

Education

Bachelor's degree in Cybersecurity or related field

Certifications: CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor

Tools

NCA standards awareness

Job description

Innovative Solutions IS seeks a Principal GRC Consultant to lead governance, risk, and compliance initiatives for clients in the region. You will craft and implement robust risk management frameworks and provide strategic advisory services to align risk and compliance with business objectives.

Responsibilities include overseeing risk assessments, third-party risk management, regulatory alignment, and ongoing program operation.