GRC Consultant - Dhahran

Role Overview We are seeking a GRC Specialist to support the organization's cybersecurity governance, risk management, and compliance activities. The ideal candidate will have experience implementing security frameworks, conducting risk assessments, managing compliance programs, and supporting internal and external audits. Key Responsibilities • Develop, review, and maintain information security policies, standards, and procedures. • Conduct cybersecurity risk assessments and track remediation plans. • Monitor compliance with regulatory and security framework requirements. • Support internal and external audits and manage audit findings. • Track and report security risks, control effectiveness, and compliance status. • Perform third-party/vendor risk assessments. • Drive awareness and adherence to governance and compliance requirements. • Collaborate with security, IT, and business teams to ensure control implementation. Required Skills & Experience • 3-7 years of experience in Cybersecurity GRC, Information Security, Risk Management, or Compliance. • Strong understanding of security frameworks such as: • ISO 27001 • NIST CSF / NIST 800-53 • COBIT • CIS Controls • Experience conducting risk assessments and compliance reviews. • Experience supporting audits and remediation activities. • Strong stakeholder management and communication skills. • Ability to prepare governance reports and management presentations.