Strategic IT & Cybersecurity GRC Consultant

Cloud Consultancy - CCDS; Riyadh; On-site; SAR 201,000 - 312,000; Full time

Benefits offered by this job

Medical Insurance

Paid Time Off

Training & Development

Performance Bonus

Job summary

CCDS is seeking a cybersecurity GRC professional to support clients in strengthening governance, risk, and compliance across their security environments in Riyadh. You will develop policies, conduct risk assessments, and coordinate audits to address control gaps and improve regulatory alignment.

The role requires 3+ years in GRC or compliance, strong knowledge of ISO 27001 and NIST, and certifications such as CISM, CISA, or CRISC.

Qualifications

• 3+ years of experience in cybersecurity GRC, risk, or compliance roles.
• Experience conducting governance or risk assessments and control gap analyses.
• Strong knowledge of ISO 27001 and NIST frameworks.
• Experience presenting governance or risk reports to leadership and coordinating with auditors.

Responsibilities

• Develop and maintain cybersecurity GRC policies, standards, and control procedures.
• Conduct risk assessments and gap analyses against regulatory requirements.
• Coordinate compliance audits and track remediation of identified deficiencies.
• Prepare governance reports and risk dashboards for stakeholders.
• Collaborate with technical teams to implement and monitor security controls.

Skills

GRC

Risk management

Compliance reporting

Auditing

Education

Bachelor's degree in Cybersecurity or Information Technology

Tools

ISO 27001

NIST frameworks

Job description

CCDS is seeking a cybersecurity GRC professional to support clients in strengthening governance, risk, and compliance across their security environments in Riyadh. You will develop policies, conduct risk assessments, and coordinate audits to address control gaps and improve regulatory alignment.

The role requires 3+ years in GRC or compliance, strong knowledge of ISO 27001 and NIST, and certifications such as CISM, CISA, or CRISC.