GRC Consultant
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant
Job Description & How to Apply Below
Exe Qut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia.
Position SummaryExe Qut is hiring an experienced, Arabic-speaking GRC Consultant – Enterprise & Cybersecurity for a 9-month project
. You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices, ensuring they align with business objectives, regulatory requirements and cybersecurity standards.
- Design and implement enterprise GRC frameworks
- Lead enterprise risk management (ERM), including risk assessments and mitigation plans
- Develop governance policies, standards, procedures and controls
- Drive information security governance and cybersecurity risk management
- Conduct gap assessments, develop remediation plans and monitor compliance
- Manage regulatory compliance, internal controls and audit activities
- Advise stakeholders and senior management on governance, risk and compliance matters
- 5–8+ years of relevant GRC and information security experience
- Proven experience designing and implementing enterprise GRC frameworks
- Strong expertise in enterprise risk management, risk assessments and risk mitigation
- Strong knowledge of information security governance and cybersecurity risk management
- Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT
- Experience in regulatory compliance, internal controls and audit management
- Strong stakeholder management and advisory skills
- Fluent Arabic speaker (required)
- Experience with Saudi regulatory frameworks such as NCA ECC, SAMA CSF or PDPL
- Certifications such as CISA, CISM, CRISC or ISO 27001 Lead Implementer/Auditor
- Experience on consulting engagements with public or private sector clients
What We Offer- Competitive compensation
- Exposure to high-impact projects with leading clients in Saudi Arabia
- Work alongside experienced cybersecurity and consulting leadership
- A collaborative, growth-oriented culture
If you're a GRC specialist who turns complex regulations into clear, practical governance, we'd love to have you on board. Let's build something great together
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).