Senior Cybersecurity Consultant – GRC Services

About the role

We are looking for a senior cybersecurity consultant to deliver governance, risk and compliance (GRC) services to Saudi clients. The role involves assessing security posture, designing architecture and guiding implementation of best‑practice controls.

Key responsibilities

• Conduct GRC engagements, including gap assessments, risk assessments and compliance audits against standards such as NCA, ISO 27001, NIST and SAMA‑CSF.
• Analyse client business environments and network designs to define security requirements.
• Design, build and maintain security architectures using frameworks like SABSA, incorporating firewalls, endpoint protection, DLP, APT detection, encryption and SIEM solutions.
• Develop cybersecurity strategies, roadmaps and data‑governance practices for clients.
• Produce high‑quality documentation and communicate findings to both technical and non‑technical stakeholders.

Required profile

• Saudi national with at least 4 years of experience in IT security, GRC or related fields.
• Bachelor’s degree in Computer Science, Information Systems or a related discipline.
• Relevant certifications such as CISSP, ISO 27001 Lead Implementer/Auditor, Security+, SANS or ISACA are desirable.
• Strong written and verbal communication skills.

Required skills

• Firewall and endpoint security technologies.
• Data loss prevention (DLP) and advanced persistent threat (APT) solutions.
• Encryption tools and security information and event management (SIEM) platforms.
• Security architecture frameworks (e.g., SABSA).
• Risk management and compliance standards (ISO 27001, NIST, NCA, SAMA‑CSF).