GRC Consultant

Governance, Risk & Compliance (GRC) – L3 IT Resource

Experience 8–12 years (relevant IT operations, security governance, and compliance experience)

• Coordinate with technology teams to identify missing patches and open vulnerabilities
• Ensure vulnerabilities are classified, prioritized, and tracked based on severity, business risk, and regulatory impact. Monitor remediation progress and validate closure evidence for resolved vulnerabilities. Ensure vulnerabilities are updated, closed, or risk‑accepted as per governance approval. Work closely with IT teams to raise change requests for patching and vulnerability remediation
• Ensure change plans are reviewed, aligned, and approved as per governance and CAB processes. Coordinate and broadcast change schedules, impact assessments, and execution plans. Track post‑change validation and closure of change activities and prepare accurate, detailed, and leadership‑ready reports on vulnerability status, patch compliance, and risk posture. Publish regular status dashboards and reports for senior leadership, governance forums, and audit stakeholders.
• Ensure all reported data is factually correct, validated, and audit‑ready as reports are shared across multiple leadership layers. Provide timely escalations for risks, delays, and non‑compliance. Coordinate with internal IT teams, external vendors, OEMs, and subsidiaries to drive timely remediation. Act as a governance bridge between central governance teams, security teams, and operations teams.
• Support audits, regulatory reviews, and internal assessments by providing required evidence and documentation.
• Strong understanding of IT infrastructure, applications, middleware, databases, and security operations. Hands‑on experience with vulnerability management, patching governance, and compliance tracking
  . Strong knowledge of SAMA cybersecurity frameworks, risk management, and regulatory expectations.
• Experience with change management processes, CAB governance, and ITSM tools
  . Experience using ITSM and GRC tools for incident, change, vulnerability, and compliance tracking
  . Advanced skills in Excel, dashboards, and structured reporting. Ability to maintain central registers, trackers, and compliance metrics. Strong coordination and stakeholder management skills.
• Ability to work with multiple teams under tight regulatory timelines
  . High attention to detail and accuracy. Clear, concise, and professional communication suitable for senior leadership.

Bachelor’s degree in information technology, Computer Science, or related field

• field
  
  Security or governance certifications (preferred):
  
  ITIL ISO