IT GRC Consultant

Position Overview

We are seeking a seasoned IT Governance, Risk & Compliance (GRC) Consultant to join our dynamic team in Riyadh, Saudi Arabia. This is an exceptional opportunity to collaborate with a leading global technology consultancy on high-impact security and compliance initiatives across the region. As an IT GRC Consultant, you will play a pivotal role in strengthening enterprise governance frameworks, mitigating cyber risks, and ensuring adherence to international regulatory standards. Your expertise will be instrumental in guiding clients through complex compliance landscapes while enhancing their overall security posture.

Key Responsibilities

In this role, you will be responsible for delivering comprehensive IT Governance, Risk & Compliance (GRC) engagements for enterprise clients. Your core duties will include:

• Conducting IT General Controls (ITGC) Reviews: Perform detailed assessments of IT controls to ensure operational integrity and compliance with established frameworks.
• Security Control Assessments: Evaluate and enhance security measures to protect enterprise assets against evolving threats.
• Enterprise Risk Assessments: Identify, analyze, and mitigate risks across IT environments to safeguard business continuity.
• Control Reviews: Assess the effectiveness of existing controls and recommend improvements to align with industry best practices.
• Cloud Security Assessments: Lead evaluations of cloud environments to ensure secure configurations and compliance with relevant standards.
• Third-Party and Vendor Risk Management (TPRM): Develop and implement strategies to assess and monitor risks associated with external partners and vendors.
• Business Continuity (BCP) and Disaster Recovery (DR) Assessments: Evaluate resilience strategies to ensure organizations can recover swiftly from disruptions.
• Compliance and Audit Support: Assist clients in achieving and maintaining compliance with industry standards and regulatory requirements, including ISO 27001, PCI-DSS, SOX, GDPR, SOC 2 Type II, and HIPAA.
• Security Advisory Services: Provide expert guidance to stakeholders on governance, risk management, and compliance strategies to enhance overall security posture.
• Security Awareness and Compliance Recommendations: Develop and deliver tailored recommendations to improve security awareness and ensure adherence to compliance obligations.

Qualifications and Experience

To excel in this role, you should possess the following qualifications and experience:

• 5-8 Years of Experience: Proven track record in IT Governance, Risk & Compliance, with hands-on experience in enterprise information security and consulting.
• Regulatory Knowledge: Familiarity with one or more of the following standards and frameworks: ISO 27001, PCI-DSS, SOX, GDPR, SOC 2 Type II, and HIPAA.
• Technical Proficiency: Extensive experience in conducting ITGC reviews, risk assessments, control reviews, cloud security assessments, third-party/vendor risk management, business continuity and disaster recovery planning, and vulnerability management.
• Client-Facing Skills: Exceptional communication and stakeholder management abilities to effectively engage with clients at all levels of the organization.
• Enterprise Consulting Experience: Prior consulting experience within large-scale enterprise environments is highly advantageous.

Why Join Us?

This role offers a unique opportunity to work on transformative projects that shape the security and compliance landscape in Saudi Arabia. You will collaborate with a diverse team of experts, gain exposure to cutting-edge technologies, and contribute to the strategic growth of leading enterprises. If you are passionate about driving excellence in IT governance and compliance, we invite you to apply and become a key player in our mission to deliver secure, resilient, and compliant business solutions.