Cybersecurity Risk and Compliance Specialist📣 Job Ad

About the Role

Accenture Middle East is seeking a Cybersecurity Risk and Compliance Specialist to join their team in Riyadh. This full-time position focuses on enhancing cybersecurity governance, risk management, and compliance frameworks.

Role Overview

This role is central to the Cybersecurity Governance, Risk, and Compliance (GRC) function. The specialist will be responsible for ensuring that cybersecurity practices align with national and international standards, regulations, and best practices. The position requires a strong understanding of risk assessment, policy development, and compliance monitoring within the cybersecurity domain.

Key Responsibilities

The Cybersecurity Risk and Compliance Specialist will be involved in:

• Implementing and managing cybersecurity governance, risk, and compliance programs.
• Conducting risk assessments and developing mitigation strategies.
• Ensuring adherence to relevant cybersecurity frameworks and regulations.
• Collaborating with various stakeholders to integrate GRC principles into business operations.
• Monitoring and reporting on the effectiveness of cybersecurity controls.

Required Qualifications and Experience

Candidates must meet the following criteria:

• A Bachelor's degree or higher in Cybersecurity, Information Systems, Computer Science, Computer Engineering, or a related field.
• A minimum of 4 years of professional experience in Cybersecurity Governance, Risk, and Compliance (GRC).
• Preference will be given to candidates with 5-8 years of experience (L2 Consultants) or 9-12 years of experience (L3 Consultants), as per defined resource levels.
• Must be a Saudi National.

Knowledge of Cybersecurity Standards

Demonstrated knowledge and practical experience are required in:

• National Standards: Strong practical experience with Saudi national cybersecurity frameworks and regulations, including NCA Essential Cybersecurity Controls (ECC), CSCC, DCC, CCC, OTCC, National Cybersecurity Strategy (NCS), National Data Management Office (NDMO), and Personal Data Protection Law (PDPL).
• International Standards: Good working knowledge of international frameworks such as ISO/IEC 27001, NIST, CIS Controls, PCI DSS, and GDPR.

Professional Certifications and Skills

The following certifications are preferred:

• ISO/IEC 27001 Lead Auditor / Lead Implementer
• GCCC
• CISSP
• CISM
• CISA
• Candidates actively pursuing relevant certifications are also encouraged to apply.
• Strong communication skills are essential for articulating complex cybersecurity concepts to diverse stakeholders.
• Proven ability to collaborate effectively within multi-stakeholder environments.
• High standards of professionalism, customer engagement, and confidentiality are required.
• The ability to handle sensitive situations with discretion and diplomacy is important.