GRC Consultant
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Consultant
Job Description & How to Apply Below
Exe Qut is a fast-growing consulting and technology services firm specializing in cybersecurity IAM cloud AI-driven platforms and custom software engineering We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia
Position SummaryExe Qut is hiring an experienced Arabic-speaking GRC Consultant Enterprise & Cybersecurity for a 9-month project. You will develop and implement enterprise-level GRC frameworks policies procedures and security governance practices ensuring they align with business objectives regulatory requirements and cybersecurity standards
What You Will Do- Design and implement enterprise GRC frameworks
- Lead enterprise risk management ERM including risk assessments and mitigation plans
- Develop governance policies standards procedures and controls
- Drive information security governance and cybersecurity risk management
- Conduct gap assessments develop remediation plans and monitor compliance
- Manage regulatory compliance internal controls and audit activities
- Advise stakeholders and senior management on governance risk and compliance matters
- Experience with Saudi regulatory frameworks such as NCA ECC SAMA CSF or PDPL
- Certifications such as CISA CISM CRISC or ISO 27001 Lead Implementer Auditor
- Experience on consulting engagements with public or private sector clients
- Competitive compensation
- Exposure to high-impact projects with leading clients in Saudi Arabia
- Work alongside experienced cybersecurity and consulting leadership
- A collaborative growth-oriented culture
If you re a GRC specialist who turns complex regulations into clear practical governance we d love to have you on board Let s build something great together
- 5 8+ years of relevant GRC and information security experience
- Proven experience designing and implementing enterprise GRC frameworks
- Strong expertise in enterprise risk management, risk assessments and risk mitigation
- Strong knowledge of information security governance and cybersecurity risk management
- Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT
- Experience in regulatory compliance, internal controls and audit management
- Strong stakeholder management and advisory skills
- Fluent Arabic speaker (required)
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).