Cybersecurity GRC Consultant – Riyadh

About the role

CCDS is seeking a Cybersecurity GRC Consultant to help clients strengthen governance, risk and compliance capabilities across their security environments. You will work closely with cross‑functional teams to design, implement and monitor controls that meet Saudi regulatory expectations.

Key responsibilities

• Develop and maintain cybersecurity GRC policies, standards, and control procedures.
• Conduct risk assessments and gap analyses against SAMA and NCA requirements.
• Coordinate compliance audits and track remediation of identified control deficiencies.
• Prepare governance reports, risk dashboards, and compliance documentation for stakeholders.
• Collaborate with technical teams to implement and monitor security controls effectively.

Required profile

• Bachelor's degree in Cybersecurity, Information Technology or a related field.
• Strong knowledge of SAMA and NCA cybersecurity requirements.
• Saudi nationality and eligibility to work in Riyadh.
• 3+ years of experience in cybersecurity GRC, risk or compliance roles.
• Experience conducting compliance audits, risk assessments and control gap analyses.
• Familiarity with ISO 27001 and NIST frameworks.
• Proven ability to present governance or risk reports to leadership and coordinate with auditors.
• Relevant certifications such as CISM, CISA, CRISC or ISO 27001 Lead Implementer are a plus.

Required skills

• ISO 27001 framework
• NIST framework
• SAMA regulatory requirements
• NCA regulatory requirements

What we offer

• Medical Insurance
• Paid Time Off
• Training & Development opportunities
• Performance Bonus