IT Cybersecurity GRC Consultant

About the role

CCDS is an IT and cybersecurity services company that delivers end-to-end enterprise security solutions, helping clients strengthen compliance and reduce cyber risk. As an IT Cybersecurity GRC Consultant in Riyadh, you will support clients in building stronger governance, risk and compliance capabilities across their cybersecurity environments, working closely with cross-functional stakeholders on complex regulatory requirements.

Key responsibilities

• Develop and maintain cybersecurity GRC policies, standards and control procedures.
• Conduct risk assessments and gap analyses against SAMA and NCA requirements.
• Coordinate compliance audits and track remediation of control deficiencies.
• Prepare governance reports, risk dashboards and compliance documentation for stakeholders.
• Collaborate with technical teams to implement and monitor security controls.

Required profile

• Bachelor's degree in Cybersecurity, Information Technology or a related field.
• 3+ years of experience in cybersecurity GRC, risk or compliance roles.
• Experience conducting compliance audits, risk assessments and control gap analyses.
• Eligible to work in Riyadh; Saudi nationality is a must.

Required skills

• Strong knowledge of SAMA and NCA cybersecurity requirements.
• Strong knowledge of ISO 27001 and NIST frameworks.
• CISM, CISA, CRISC or ISO 27001 Lead Implementer certification.
• Experience presenting governance or risk reports to leadership and coordinating with auditors.

What we offer

• Medical insurance.
• Paid time off.
• Training and development.
• Performance bonus.