GRC Consultant

We are seeking a motivated GRC Consultant with SAMA experience to support governance, risk management, and compliance initiatives across client environments. The consultant will assist in implementing cybersecurity governance frameworks, conducting risk assessments, developing policies, and supporting regulatory compliance initiatives for clients across banking, government, telecom, and other regulated sectors.

• Support implementation of cybersecurity governance frameworks and security controls using SAMA framework.
• Conduct enterprise and IT risk assessments.
• Develop and review information security policies, standards, procedures, and guidelines.
• Perform compliance assessments against Saudi and international cybersecurity standards.
• Support internal and external audit activities.
• Track remediation plans and closure of audit findings.
• Perform control effectiveness and maturity assessments.
• Support third-party/vendor security risk assessments.
• Maintain enterprise risk registers and compliance documentation.
• Prepare governance dashboards, compliance reports, and executive presentations.
• Coordinate with business and technical teams to ensure regulatory compliance.
• Conduct cybersecurity governance awareness sessions.

• Good understanding of Governance, Risk & Compliance (GRC) principles.
• Knowledge of enterprise risk management methodologies.
• Strong analytical, documentation, and communication skills.
• Experience developing security policies and compliance documentation.
• Ability to engage with business and technical stakeholders.