Cybersecurity GRC Expert

Cybersecurity GRC Expert role involves leading GRC engagements, developing cybersecurity governance frameworks, and ensuring client compliance with international and KSA-specific frameworks.

Requirements

• Lead GRC engagements including cybersecurity assessments, maturity evaluations, gap analyses, and compliance improvement roadmaps.
• Develop and implement cybersecurity governance frameworks, policies, procedures, and standards aligned with ISO 27001, NCA ECC/CCC, NIST CSF, COBIT, and sector-specific mandates.
• Conduct enterprise risk assessments, create risk treatment plans, and drive continuous risk reduction programs with business stakeholders.
• Manage internal/external audits, regulatory compliance initiatives, and coordinate with client teams to ensure audit readiness and control effectiveness.
• Provide strategic advisory on cybersecurity governance, operating models, KPIs, and continuous improvement across government and enterprise environments.