Cybersecurity GRC Consultant

We are seeking a Cybersecurity GRC Consultant to support governance, risk, and compliance initiatives, ensuring alignment with cybersecurity frameworks, regulatory requirements, and industry best practices.

Key Requirements:

• 3–6 years of experience in Cybersecurity Governance, Risk & Compliance (GRC)

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field

• Strong knowledge of cybersecurity governance, risk management, compliance, and audit processes

• Hands-on experience with NCA ECC, ISO 27001, cybersecurity policies, standards, and procedures

• Experience conducting risk assessments, gap assessments, and compliance reviews

• Experience in developing and reviewing cybersecurity policies, standards, frameworks, and governance documentation

• Arabic language proficiency is mandatory

• Good command of English

• Strong stakeholder management and communication skills

Preferred Qualifications:

• Experience with GRC platforms such as Archer, Jithra, CyberArrow, MetricStream, or similar solutions

• Professional certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CRISC, CISA, or Security+

Key Responsibilities:

• Deliver cybersecurity governance, risk, and compliance activities across client engagements

• Conduct cybersecurity risk assessments and compliance assessments against applicable frameworks and regulations

• Develop and maintain cybersecurity policies, standards, procedures, and governance documentation

• Support organizations in implementing and improving cybersecurity controls and compliance programs

• Perform gap assessments and provide recommendations to address identified findings

• Support internal and external audits and regulatory assessments

• Prepare reports, presentations, and executive-level compliance dashboards

• Collaborate with stakeholders to enhance cybersecurity maturity and regulatory compliance