Overview
GRC Consultant; saudi Jobs in Riyadh, Saudi Arabia at HCLTech
Position: GRC Consultant (saudi only)
Job Description
The GRC Consultant supports the delivery of Governance, Risk, and Compliance (GRC) services, assisting senior team members in executing client projects.
Responsibilities
- Assist in gathering and analyzing data for GRC assessments.
- Support the preparation of assessment reports, governance documentation, and client presentations.
- Lead the preparation and execution of external audits for ISO 27001 and SOC 2 (Type 1 &
2) certifications. - Manage compliance with local Saudi regulations, specifically NCA ECC and SAMA cybersecurity frameworks, also perform assessments for different frameworks (e.g., ISO 27001, NDI Controls, NCA-Frameworks- ECC, CSCC, DCC, TCC & OSMACC, and other best practices).
- Collaborate with senior consultants on the development and implementation of policies, procedures, frameworks, etc.
- Develop and implement policies, procedures, and controls that ensure compliance with laws, regulations, and industry standards.
- Participate in client workshops and project meetings.
- Liaise with cross-functional teams (GRC, IT, legal, audit, operations) to support secure and compliant business operations.
- Assist in the selection and implementation of GRC software solutions to automate processes and improve reporting capabilities.
- Stay informed about industry trends, regulatory changes, and emerging risks to provide proactive advice to clients.
- Evaluate third-party vendors for compliance with security standards and risk management requirements.
- Provide input into enterprise risk management processes from a cybersecurity perspective.
- Track and report key GRC metrics and issues to stakeholders and executive leadership.
Minimum Requirements
- Education:
Bachelor’s degree in Cybersecurity, Information Technology, or related fields.
- Experience:
5-6 years of relevant experience with a basic understanding of cybersecurity concepts, Internal Audit, Risk management, and compliance standards.
- Certifications such as CISM/CISSP, CompTIA Security+, ISO 27001 Lead Implementor, SSCP & ITIL or equivalent are a plus.
- Experience with GRC platforms & ITSM knowledge is a plus.
- Strong analytical and problem‑solving skills.
- Effective communication skills (verbal and written).
- Attention to detail in documentation and reporting.
- Team-oriented mindset with a proactive attitude.
#J-18808-Ljbffr
Title: GRC Consultant; saudi
Company: HCLTech
Location: Riyadh, Saudi Arabia
Category: