Cybersecurity GRC Consultant

About the role

We are looking for a Cybersecurity GRC Consultant to lead governance, risk and compliance initiatives for our clients. The role involves aligning security programs with recognized frameworks, regulatory requirements and industry best practices while delivering actionable insights to senior stakeholders.

Key responsibilities

• Deliver cybersecurity governance, risk and compliance activities across client engagements.
• Conduct risk assessments, gap analyses and compliance reviews against standards such as NCA ECC and ISO 27001.
• Develop, maintain and review cybersecurity policies, standards, procedures and governance documentation.
• Support implementation and improvement of security controls and compliance programs.
• Assist with internal and external audits, regulatory assessments and prepare executive‑level reports and dashboards.
• Collaborate with stakeholders to raise cybersecurity maturity and ensure regulatory alignment.

Required profile

• 3–6 years of experience in cybersecurity governance, risk and compliance.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or a related field.
• Fluent Arabic and good command of English.
• Strong stakeholder management and communication skills.

Required skills

• Hands‑on experience with NCA ECC and ISO 27001 frameworks.
• Proficiency in conducting risk assessments, gap assessments and compliance reviews.
• Experience with GRC platforms such as Archer, Jithra, CyberArrow or MetricStream.
• Professional certifications (ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CRISC, CISA, Security+).