Cybersecurity GRC Consultant

About the Role

Nozom is seeking a Cybersecurity GRC Consultant to join our team in Riyadh, Saudi Arabia. This full-time position involves supporting governance, risk, and compliance initiatives to ensure alignment with cybersecurity frameworks, regulatory requirements, and industry best practices.

Key Responsibilities

• Deliver cybersecurity governance, risk, and compliance activities across client engagements.
• Conduct cybersecurity risk assessments and compliance assessments against applicable frameworks and regulations.
• Develop and maintain cybersecurity policies, standards, procedures, and governance documentation.
• Support organizations in implementing and improving cybersecurity controls and compliance programs.
• Perform gap assessments and provide recommendations to address identified findings.
• Support internal and external audits and regulatory assessments.
• Prepare reports, presentations, and executive-level compliance dashboards.
• Collaborate with stakeholders to enhance cybersecurity maturity and regulatory compliance.

Qualifications and Experience

• 3–6 years of experience in Cybersecurity Governance, Risk & Compliance (GRC).
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Strong knowledge of cybersecurity governance, risk management, compliance, and audit processes.
• Hands-on experience with NCA ECC, ISO 27001, cybersecurity policies, standards, and procedures.
• Experience conducting risk assessments, gap assessments, and compliance reviews.
• Experience in developing and reviewing cybersecurity policies, standards, frameworks, and governance documentation.
• Strong stakeholder management and communication skills.

Preferred Qualifications

• Experience with GRC platforms such as Archer, Jithra, CyberArrow, MetricStream, or similar solutions.
• Professional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CRISC, CISA, or Security+.

Work Type and Location

This is a full-time position based in Riyadh, Saudi Arabia, offering an opportunity to contribute to critical cybersecurity initiatives within a professional environment.