GRC Consultant📣 Job Ad

About NuSummit Cybersecurity

NuSummit Cybersecurity is seeking a dedicated GRC Consultant to join our team in Riyadh, Saudi Arabia. This full-time role focuses on supporting governance, risk management, and compliance initiatives for our diverse client base within regulated sectors.

Role Summary

The GRC Consultant will be instrumental in assisting clients with the implementation of robust cybersecurity governance frameworks and ensuring adherence to regulatory standards. This position requires specific experience with the SAMA framework to effectively support clients across banking, government, telecom, and other regulated industries.

Key Responsibilities

• Support the implementation of cybersecurity governance frameworks and security controls, specifically utilizing the SAMA framework.
• Conduct enterprise and IT risk assessments to identify potential vulnerabilities.
• Develop and review information security policies, standards, procedures, and guidelines.
• Perform compliance assessments against both Saudi and international cybersecurity standards.
• Support internal and external audit activities, ensuring smooth processes.
• Track remediation plans and ensure the timely closure of audit findings.
• Perform control effectiveness and maturity assessments to gauge security posture.
• Support third-party and vendor security risk assessments.
• Maintain comprehensive enterprise risk registers and compliance documentation.
• Prepare governance dashboards, detailed compliance reports, and executive presentations.
• Coordinate with business and technical teams to ensure ongoing regulatory compliance.
• Conduct cybersecurity governance awareness sessions for client personnel.

Required Experience and Qualifications

Candidates should possess 5 to 10 years of experience in Governance, Risk, and Compliance (GRC), with a strong background in cybersecurity. Demonstrated experience with the SAMA framework is essential for this role, along with a proven ability to manage and implement GRC initiatives.

Client Engagement and Industry Focus

This role involves direct engagement with clients across critical sectors, including banking, government, and telecommunications. The consultant will be responsible for navigating complex regulatory landscapes and providing expert guidance tailored to each client's specific needs.

Application Information

We invite qualified candidates to apply for this GRC Consultant position. Further details regarding the application process will be provided upon interest.