Cybersecurity Risk and Compliance Specialist

About the Role

Accenture Middle East is seeking a Cybersecurity Risk and Compliance Specialist to join their team in Riyadh, Saudi Arabia. This full-time role focuses on cybersecurity governance, risk, and compliance (GRC), requiring a Saudi National with significant experience in the field.

Key Responsibilities

• Applying practical experience with Saudi national cybersecurity frameworks and regulations.
• Utilizing knowledge of international cybersecurity standards and best practices.
• Collaborating effectively within multi-stakeholder environments, including SITE teams.
• Articulating complex cybersecurity concepts clearly to diverse stakeholders.
• Maintaining high standards of professionalism, customer engagement, and confidentiality.
• Handling sensitive situations with discretion and diplomacy.

Qualifications and Experience

• Nationality: Must be a Saudi National.
• Education: Bachelor's degree or higher in Cybersecurity, Information Systems, Computer Science, Computer Engineering, or a related field.
• Professional Experience: Minimum of 4+ years in Cybersecurity Governance, Risk, and Compliance (GRC). Preference for 5-8 years for L2 Consultants and 9-12 years for L3 Consultants.

Required Knowledge and Standards

Candidates should possess strong practical experience with national cybersecurity frameworks and a good working knowledge of international standards.

• National Standards: NCA Essential Cybersecurity Controls (ECC), CSCC, DCC, CCC, OTCC, National Cybersecurity Strategy (NCS), National Data Management Office (NDMO), Personal Data Protection Law (PDPL).
• International Standards: ISO/IEC 27001, NIST, CIS Controls, PCI DSS, GDPR.

Certifications

One or more relevant certifications are preferred, and candidates actively pursuing certifications are also encouraged to apply.

• ISO/IEC 27001 Lead Auditor / Lead Implementer
• GCCC
• CISSP
• CISM
• CISA

Professional Attributes

The role requires strong communication skills and a proven ability to work effectively in a multi-stakeholder environment, maintaining high standards of professionalism and confidentiality.