Innovative Solutions
GRC Principal Consultant (RE)
Riyadh, Saudi ArabiaPosted 1 months ago
Apply link checked 7 days ago
- Salary
- AED 34k–54k a month· est.
- Job type
- Full time
- Level
- Lead
- Field
- Legal & Compliance
- Work mode
- On site
About the role
Company Description Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is "Delivering secure and intelligent digital services that empower organizations" Role Description The Principal GRC Consultant will lead strategic initiatives focused on Governance, Risk, and Compliance. You will provide expert advisory services to clients, develop and implement robust frameworks, and guide the client in aligning their risk and compliance strategies. Responsibilities - Implement and manage cybersecurity risk management and compliance programs. - Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities. - Develop and execute risk treatment and mitigation plans. - Monitor and track cybersecurity risks, and provide regular reporting to stakeholders. - Manage third-party cybersecurity risks, including assessment and ongoing monitoring. - Support the implementation and operation of the cybersecurity compliance program. - Perform annual compliance assessments and ensure continuous compliance tracking. - Ensure adherence to relevant regulatory requirements and standards (e.g., NCA framework). - Provide day-to-day operational support for cybersecurity risk and compliance activities.
Requirements
- - Bachelor's degree in Cybersecurity, Risk Management, Information Security, or a related field.
- - 4+ years of experience in Governance, Risk, and Compliance.
- - Strong knowledge of cybersecurity frameworks and standards (e.g., NCA, ISO 27001, NIST).
- - Proven experience in developing and leading compliance programs.
- - Excellent leadership, communication, and stakeholder management skills.
- - Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
- - Ability to work effectively with senior executives and multidisciplinary teams.
- - Familiarity with AI tools and technologies.
Responsibilities
- - Implement and manage cybersecurity risk management and compliance programs.
- - Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities.
- - Develop and execute risk treatment and mitigation plans.
- - Monitor and track cybersecurity risks, and provide regular reporting to stakeholders.
- - Manage third-party cybersecurity risks, including assessment and ongoing monitoring.
- - Support the implementation and operation of the cybersecurity compliance program.
- - Perform annual compliance assessments and ensure continuous compliance tracking.
- - Ensure adherence to relevant regulatory requirements and standards (e.g., NCA framework).
- - Provide day-to-day operational support for cybersecurity risk and compliance activities.
Skills
- Governance, Risk and Compliance (GRC)
- cybersecurity risk management
- cybersecurity frameworks and standards (NCA, ISO 27001, NIST)
- compliance programs development and leadership
- third-party risk management
- risk assessments
- risk treatment and mitigation
- regulatory compliance
- NCA framework
- CISSP
- CISM
- CRISC
- ISO 27001 Lead Implementer/Auditor
- stakeholder management
- leadership
- information security
Not sure you fit this role?
Upload your CV and see how you score against Innovative Solutions and every other live job. It's free.
Get my free matchesAED 34k–54k a month· est.