Senior TPRM Consultant & Cyber Risk Lead

Deloitte Development LLC; Riyadh; On-site; SAR 300,000 - 520,000; Full time

Job summary

Deloitte Development LLC is seeking a Consultant – Manager for Cyber Operate focused on Third-Party Risk Management (TPRM) in KSA. You will design and maintain the TPRM framework, assess vendors, and ensure compliant risk controls across IT and business functions.

You will lead due diligence, assessments, and remote/on-site reviews, coordinate with procurement, legal, and security teams, and drive improvements in risk posture while aligning with NCA and cloud security best practices.

Qualifications

• Years of experience in IT/cybersecurity risk assessment.
• Experience designing or updating TPRM framework, policy, procedures or SOPs.
• Ability to read and challenge SOC 2 reports and ISO certificates.

Responsibilities

• Design and maintain the TPRM framework across Cybersecurity, Procurement, Legal and business owners.
• Run the third-party risk lifecycle including due diligence, onboarding, reassessment and offboarding.
• Assess third parties using questionnaires, evidence and remote/on-site assessments.
• Manage supply chain cybersecurity risks including SBOM, software/hardware controls and incident readiness.
• Define standard clauses and contract protections for high-risk suppliers; track findings to remediation.
• Track and report posture of suppliers; maintain risk registers and feed results to enterprise risk.
• Coordinate with OT and cloud security teams and ensure alignment with NCA and PDPL requirements.

Skills

TPRM framework design

Vendor risk assessment

SOC 2 / ISO 27001 knowledge

NIST controls familiarity

Cloud security controls

IT audit background

Arabic language (plus)

Education

Bachelor's in IT, cybersecurity or related field

Tools

OneTrust ProcessUnity Archer ServiceNow VRM

Security rating services (SecurityScorecard, BitSight)

Job description

Deloitte Development LLC is seeking a Consultant – Manager for Cyber Operate focused on Third-Party Risk Management (TPRM) in KSA. You will design and maintain the TPRM framework, assess vendors, and ensure compliant risk controls across IT and business functions.

You will lead due diligence, assessments, and remote/on-site reviews, coordinate with procurement, legal, and security teams, and drive improvements in risk posture while aligning with NCA and cloud security best practices.