Information Security Compliance Consultant (Non-Technical

Information Security Compliance Consultant

Important:
This Is Not a Technical Cybersecurity Role

This position is focused on compliance, documentation, governance, regulatory coordination, and audit support.

We are seeking an Information Security Compliance Consultant to support information security and data protection compliance activities in Saudi Arabia.

The role will serve as a key local representative for information security and personal data protection compliance, working closely with Saudi regulatory authorities, senior leadership, IT and security teams, auditors, and internal stakeholders
.

The successful candidate will be responsible for coordinating regulatory requirements, supporting PDPL compliance, localizing policies and procedures, maintaining compliance documentation, and ensuring the organization remains prepared for regulatory reviews and audits.

• Serve as the local point of contact with relevant Saudi regulatory authorities, including NCA and SDAIA
  .
• Monitor, interpret, and communicate regulatory notices, requirements, circulars, and updates to relevant internal stakeholders.
• Coordinate regulatory communications, submissions, responses, and required documentation through official channels and portals.
• Support regulatory notifications related to cybersecurity or personal data incidents in line with applicable requirements and internal procedures.
• Maintain professional and effective communication with government and regulatory stakeholders.

• Support compliance with the Saudi Personal Data Protection Law (PDPL).
• Coordinate the identification and documentation of personal data processing activities with IT and business teams.
• Support the preparation and maintenance of PDPL-related filings, declarations, policies, procedures, and employee communications.
• Own and maintain local PDPL compliance documentation and supporting audit evidence.
• Ensure compliance documentation remains accurate, current, organized, and readily available for regulatory reviews and audits.

• Support the localization of global cybersecurity policies and frameworks into Saudi-compliant policies, SOPs, and procedures.
• Ensure relevant documentation is aligned with applicable Saudi requirements, including NCA Essential Cybersecurity Controls (ECC) and Cloud Cybersecurity Controls (CCC) where applicable.
• Coordinate with technical teams to collect and organize evidence required to demonstrate compliance.
• Maintain appropriate version control and documentation standards across policies, procedures, and compliance records.

• Develop and maintain a structured Compliance Evidence Repository to ensure audit traceability and readiness.
• Collect, organize, and maintain compliance evidence, including:
• Policy approvals and acknowledgements
• Security committee and management meeting minutes
• Access approval records
• Security and awareness training records
• System screenshots and extracts provided by technical teams
• Other supporting documentation required for compliance
• Coordinate with internal stakeholders and auditors to ensure evidence is complete, accurate, and available when required.
• Track outstanding compliance requirements and ensure timely follow-up and closure.

• Coordinate information security and PDPL awareness training for local employees.
• Support phishing simulation exercises and maintain appropriate training and awareness records.
• Assist with basic information security compliance checks for local vendors and third parties.
• Review supporting documentation, including NDAs and information security clauses, where required.

• Minimum 2 years of experience in compliance, IT governance, regulatory affairs, audit support, or information security-related roles.
• Strong understanding of information security, data protection, and regulatory compliance concepts.
• Previous experience working with Saudi government entities or regulatory bodies is strongly preferred.
• Ability to prepare clear and professional government and regulatory correspondence
  .
• Profession…