GRC Principal Consultant (RE)

Company Description

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with its headquarters in Riyadh and additional offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi. We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Our mission is "Delivering secure and intelligent digital services that empower organizations"

Role Description

The Principal GRC Consultant will lead strategic initiatives focused on Governance, Risk, and Compliance. You will provide expert advisory services to clients, develop and implement robust frameworks, and guide the client in aligning their risk and compliance strategies.

Responsibilities

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks, and provide regular reporting to stakeholders.
• Manage third-party cybersecurity risks, including assessment and ongoing monitoring.
• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous compliance tracking.
• Ensure adherence to relevant regulatory requirements and standards (e.g., NCA framework).
• Provide day-to-day operational support for cybersecurity risk and compliance activities.

Requirements

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or a related field.
• 4+ years of experience in Governance, Risk, and Compliance.
• Strong knowledge of cybersecurity frameworks and standards (e.g., NCA, ISO 27001, NIST).
• Proven experience in developing and leading compliance programs.
• Excellent leadership, communication, and stakeholder management skills.
• Relevant certifications (e.g., CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor).
• Ability to work effectively with senior executives and multidisciplinary teams.
• Familiarity with AI tools and technologies.