Cybersecurity GRC & Risk

About the Role

BDO Saudi Arabia, Dr. Mohamed Al-Amri & Co. is seeking a Cybersecurity GRC & Risk professional to join their team in Riyadh, Saudi Arabia. This full-time role focuses on enhancing client cybersecurity governance, risk management, and regulatory compliance, and leading cybersecurity programs for organizations across the Kingdom.

Key Responsibilities

• Deliver cybersecurity governance, risk, and compliance (GRC) engagements for clients across regulated sectors.
• Assess client compliance against NCA frameworks (ECC, CSCC, CCC, DCC), SAMA CSF, ISO/IEC 27001, and NIST CSF, and develop practical remediation roadmaps.
• Design and review cybersecurity policies, standards, and procedures tailored to client environments.
• Perform cybersecurity risk and maturity assessments, facilitate risk workshops, and advise on risk treatment.
• Design cybersecurity risk management methodologies and risk registers for clients.
• Support clients through internal audits, external audits, and regulatory reviews, including remediation tracking.
• Perform third-party and vendor cybersecurity risk assessments.
• Provide technical assurance and advisory over client cybersecurity programs, including architecture and vendor deliverable reviews.
• Design KPI/KRI frameworks and present findings and recommendations to client senior management.
• Develop and deliver cybersecurity awareness programs.
• Contribute to proposals, methodologies, and practice growth; coach and develop junior team members.

Experience Required

• Candidates should possess 5-10 years of experience in cybersecurity GRC and risk management.

Work Type and Location

This is a full-time position based in Riyadh, Saudi Arabia, focusing on client engagements across the Kingdom.

Compensation

Salary for this position will be not disclosed.

Application Process

Join our team to contribute to strengthening cybersecurity postures for leading organizations.