CyberSecurity Consultant – Banking GRC

Cybersecurity Consultant – Banking GRC Company: DXC Technology Location: Saudi Arabia Role Summary DXC Technology is seeking a Cybersecurity Consultant with hands-on experience in cybersecurity governance, risk, and regulatory compliance to support a banking engagement. The consultant will independently conduct cybersecurity assessments, identify control gaps, support implementation, and track remediation. The role requires practical experience applying cybersecurity regulatory frameworks within banks or financial institutions. Key Responsibilities • Conduct cybersecurity compliance assessments, review evidence, and identify control gaps. • Develop remediation plans with clear priorities, owners, and timelines; track actions through closure. • Work with business, IT, and cybersecurity teams to implement controls and validate their effectiveness. • Develop and update cybersecurity policies, standards, procedures, and control matrices. • Perform cybersecurity risk assessments and maintain risk registers and treatment plans. • Prepare management reports, compliance dashboards, and documentation supporting regulatory reporting. • Support audits and regulatory reviews through evidence collection, control walkthroughs, and responses to findings. • Coordinate with senior management and control owners to resolve compliance gaps. Required Qualifications and Experience • Approximately 6 years of experience in cybersecurity consulting, Governance, Risk, and Compliance (GRC), or cybersecurity risk management. • Hands-on experience applying Saudi banking cybersecurity regulatory requirements, including assessments, gap analysis, control implementation, and remediation. • Previous experience working within or supporting banks or financial institutions. • Strong understanding of cybersecurity governance, regulatory compliance, and control effectiveness. • Practical experience developing policies, procedures, and management reports. • Ability to independently manage assigned activities and engage business and technical stakeholders. • Strong analytical, documentation, and communication skills. • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience. Preferred Qualifications • Saudi Arabia or GCC banking experience. • Relevant certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 Lead Implementer / Lead Auditor. • Familiarity with ISO 27001, NIST CSF, and GRC platforms. What We Are Looking For A delivery-focused consultant with practical banking compliance experience who can assess controls, translate regulatory requirements into actionable improvements, and work with stakeholders to close gaps. Show more Show less

Approximately 6 years of experience in cybersecurity consulting, Governance, Risk, and Compliance (GRC), or cybersecurity risk management. Hands-on experience applying Saudi banking cybersecurity regulatory requirements, including assessments, gap analysis, control implementation, and remediation. Previous experience working within or supporting banks or financial institutions. Strong understanding of cybersecurity governance, regulatory compliance, and control effectiveness. Practical experience developing policies, procedures, and management reports. Ability to independently manage assigned activities and engage business and technical stakeholders. Strong analytical, documentation, and communication skills. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent relevant experience.

Conduct cybersecurity compliance assessments, review evidence, and identify control gaps. Develop remediation plans with clear priorities, owners, and timelines; track actions through closure. Work with business, IT, and cybersecurity teams to implement controls and validate their effectiveness. Develop and update cybersecurity policies, standards, procedures, and control matrices. Perform cybersecurity risk assessments and maintain risk registers and treatment plans. Prepare management reports, compliance dashboards, and documentation supporting regulatory reporting. Support audits and regulatory reviews through evidence collection, control walkthroughs, and responses to findings. Coordinate with senior management and control owners to resolve compliance gaps.