GRC Consultant – Immediate Hiring

Job description

This role will specialize in all aspects of information security management and business and regulatory compliance using cloud services in large-scale computing environments.

Responsibilities

• Refine risk management strategies to ensure key security risks are captured and actioned.
• Identify gaps in technological architectures and systems controls, and develop solutions to remediate those gaps.
• Assess the risk from security deviations and exceptions.
• Dive deep with threat modeling and data flows.
• Oversee the execution of risk assessments for security and technology risks.
• Identify gaps in controls and processes.
• Develop and deliver risk and finding dashboards and reporting.
• Oversee and manage risk management tools.
• Implement automated risk scoring where possible.
• Continuously improve the program and recommend improvements to drive program efficiencies.
• Maintain subject matter expertise in security risk and control.

Qualifications

• Bachelor’s degree in Management Information Systems, Computer Science, or related field, or relevant industry experience.
• 3-6 years of information security, audit, risk management, compliance, or risk consulting experience.
• Excellent written and verbal communication skills.
• Subject matter expert in risk management, business risk analysis, and making complex business/risk trade-off recommendations and decisions.
• In-depth knowledge of security compliance, risk management, and technical frameworks.
• Maturity, judgment, and proven ability to lead and influence others.
• Independently driven, resourceful, and able to deliver results with minimal direction.
• High sense of ownership, urgency, and drive.
• Leadership-level communication (written and verbal).

Preferred Qualifications

• Master's degree in Business Administration, Information Systems, related field, or equivalent practical experience.
• Experience working with engineers and architects.
• Relevant industry certifications (CISSP, CISA, etc.).
• Experience working with IT-GRC tools.
• Experience implementing automated risk scoring.
• Experience working with IT-Risk Frameworks (NIST, ISO-27X, etc.).

Job Location: Saudi Arabia

No of Positions: 2

Note: The candidate would be expected to work in diverse consulting engagements and be willing to travel to Middle East countries for project execution at least 50% of their time.

Preference will be given to candidates who can join immediately or within 15 days at the maximum.

Employment Type: Full-time

Industry

• Information Technology & Services