Senior Cybersecurity Consultant – GRC Services

About the role

We are seeking a Senior Cybersecurity Consultant to deliver high‑quality GRC (Governance, Risk, and Compliance) services to our clients in Saudi Arabia. The role involves assessing security architectures, identifying gaps, and designing robust protection strategies that align with local and international standards.

Key responsibilities

• Conduct hands‑on GRC assessments, gap analyses, and security audits for client environments.
• Determine security requirements by evaluating business contexts, network architectures, and design specifications.
• Design, build, and maintain security architectures using best‑practice frameworks such as SABSA.
• Develop and implement risk‑management frameworks, performing risk assessments across technology, processes, and personnel.
• Ensure compliance with standards like NCA, ISO 27001, NIST, and SAMA‑CSF through audits and remediation plans.
• Create cybersecurity roadmaps, strategies, and best‑practice documentation for data governance and protection.

Required profile

• Minimum 4 years of experience in GRC and cybersecurity consulting.
• Bachelor’s degree in Computer Science, Information Systems, or a related field.
• Strong written and verbal communication skills, with the ability to interact with senior client stakeholders.
• Relevant security certifications (e.g., CISSP, ISO 27001 Lead Implementer, Security+, SANS, ISACA).

Required skills

• GRC frameworks and rules
• SAMA‑CSF, NCA, ISO 27001, NIST
• Risk Management and Risk Assessment
• SANS and ISACA certifications
• SABSA security architecture
• Firewall, Endpoint Security, DLP, APT mitigation, Encryption solutions
• SIEM, Cybersecurity strategy, Data Governance, Data Protection