We are seeking a Cybersecurity GRC Consultant to support governance, risk, and compliance initiatives, ensuring alignment with cybersecurity frameworks, regulatory requirements, and industry best practices.
Key Requirements:
• 3–6 years of experience in Cybersecurity Governance, Risk & Compliance (GRC)
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field
• Strong knowledge of cybersecurity governance, risk management, compliance, and audit processes
• Hands-on experience with NCA ECC, ISO 27001, cybersecurity policies, standards, and procedures
• Experience conducting risk assessments, gap assessments, and compliance reviews
• Experience in developing and reviewing cybersecurity policies, standards, frameworks, and governance documentation
• Arabic language proficiency is mandatory
• Good command of English
• Strong stakeholder management and communication skills
Preferred Qualifications:
• Experience with GRC platforms such as Archer, Jithra, CyberArrow, MetricStream, or similar solutions
• Professional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CRISC, CISA, or Security+
Key Responsibilities:
• Deliver cybersecurity governance, risk, and compliance activities across client engagements
• Conduct cybersecurity risk assessments and compliance assessments against applicable frameworks and regulations
• Develop and maintain cybersecurity policies, standards, procedures, and governance documentation
• Support organizations in implementing and improving cybersecurity controls and compliance programs
• Perform gap assessments and provide recommendations to address identified findings
• Support internal and external audits and regulatory assessments
• Prepare reports, presentations, and executive-level compliance dashboards
• Collaborate with stakeholders to enhance cybersecurity maturity and regulatory compliance
