JobCubby JobCubby
Sign up
Datamatics Technologies

GRC Cybersecurity Consultant (Saudi National)

Datamatics Technologies Riyadh governorate, Riyadh Region, Saudi Arabia

IT Services and IT Consulting · 51-200 employees

13 h ago
security Senior (5-10 yrs) Full-time Saudi Arabia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The consultant will develop and maintain cybersecurity governance frameworks while ensuring compliance with local Saudi regulations and international standards. They will also lead risk assessments, audit coordination, and the development of risk treatment plans to strengthen the organization's security posture.

What they look for

Governance Risk Management Compliance Cybersecurity SAMA NCA ECC ISO 27001 NIST CSF COBIT Audit Coordination Business Impact Analysis Business Continuity Planning Policy Drafting Risk Assessment Stakeholder Management

Requirements

Candidates must hold a bachelor's degree in a relevant field and possess at least 5 years of experience in GRC cybersecurity. Proficiency in Saudi regulatory frameworks like SAMA and NCA, alongside international standards such as ISO 27001 and NIST, is mandatory.

Full description

Job Title: GRC Cybersecurity Consultant (Saudi National)

Location: Riyadh, Saudi Arabia Experience: 5+ Years Nationality: Saudi National (Mandatory)

Job Summary

We are seeking a skilled and experienced GRC (Governance, Risk & Compliance) Cybersecurity Consultant to support cybersecurity governance initiatives, regulatory compliance, and risk management programs. The ideal candidate will have strong experience in implementing security frameworks, conducting risk assessments, and ensuring compliance with local and international standards within enterprise environments.

Key Responsibilities

  • Develop, implement, and maintain cybersecurity governance frameworks, policies, and procedures.
  • Conduct enterprise-wide cyber risk assessments and gap analysis.
  • Ensure compliance with Saudi regulatory requirements such as SAMA, NCA ECC, and other relevant local frameworks.
  • Align organizational security posture with international standards such as ISO 27001, NIST CSF, and COBIT.
  • Lead internal and external audit coordination activities.
  • Develop risk treatment plans and track remediation activities.
  • Perform third-party/vendor risk assessments.
  • Conduct Business Impact Analysis (BIA) and support Business Continuity Planning (BCP).
  • Establish and monitor Key Risk Indicators (KRIs) and security metrics.
  • Prepare executive-level reports and dashboards on risk and compliance status.
  • Conduct security awareness and compliance training sessions.
  • Support incident management from a governance and reporting perspective.

Required Qualifications & Skills

  • Bachelor’s degree in Cybersecurity, Information Security, IT, or related field.
  • 5+ years of experience in Cybersecurity Governance, Risk Management, and Compliance.
  • Strong knowledge of Saudi cybersecurity regulations including:
  • Saudi Central Bank (SAMA)
  • National Cybersecurity Authority (NCA – ECC Framework)
  • Experience with international frameworks such as:
  • International Organization for Standardization (ISO 27001)
  • National Institute of Standards and Technology (NIST)
  • Experience in policy drafting, risk registers, and compliance reporting.
  • Hands-on experience with GRC tools and platforms.
  • Strong analytical, documentation, and stakeholder management skills.
  • Excellent communication skills in Arabic and English.

Preferred Certifications

  • ISO 27001 Lead Implementer / Lead Auditor
  • CISM (Certified Information Security Manager)
  • CRISC (Certified in Risk and Information Systems Control)
  • CISSP

Similar roles