Cybersecurity GRC Consultant

About the role

The Cybersecurity GRC Consultant will support the design, implementation and continuous improvement of governance, risk and compliance (GRC) initiatives for our clients. Working closely with senior consultants, architects and client stakeholders, the consultant ensures that cybersecurity policies, standards and operating models align with organizational objectives and Saudi Arabian regulatory requirements.

Key responsibilities

• Develop, implement and maintain cybersecurity governance frameworks, including policies, standards, procedures and guidelines.
• Assist in designing and refining governance operating models, organizational structures and RACI matrices.
• Create and maintain governance‑related KPIs, KRIs, dashboards and reporting mechanisms.
• Conduct governance maturity assessments, gap analyses and benchmarking activities.

Required profile

• Proven experience in cybersecurity governance, risk management or compliance.
• Familiarity with Saudi cybersecurity regulations and alignment of security initiatives with business objectives.
• Ability to collaborate with senior consultants, architects and client stakeholders.
• Strong analytical and documentation skills.

Required skills