Senior GRC Consultant

Cyber Force

Responsibilities:

• Spearhead the development and implementation of GRC strategies that resonate with the global regulatory landscape, ensuring compliance and robust cybersecurity governance for our clients across various sectors including military and banking.
• Navigate through a variety of regulatory frameworks, including but not limited to FRA 139 decree, KSA NCA, ARAMCO Third Party Risk Management framework, and relevant UAE regulations, to provide comprehensive GRC solutions.
• Engage closely with clients across the USA, UK, Europe, MENA regions, and beyond, understanding their unique regulatory environments and tailoring GRC practices to their specific needs.
• Lead risk assessments, compliance audits, and policy reviews to identify and mitigate potential compliance risks, ensuring seamless adherence to international standards.
• Act as a GRC ambassador, educating clients and stakeholders on the importance of compliance and cybersecurity governance through workshops, seminars, and tailored training sessions.

Qualifications:

• Profound knowledge and expertise in global cybersecurity regulations, with the ability to apply this knowledge practically to benefit our international clientele.
• Proven experience in GRC roles, with a track record of successfully navigating complex regulatory environments and delivering customized GRC solutions.
• Excellent command of the English language, with stellar presentation and communication skills to articulate complex GRC concepts to a varied audience.
• A Bachelor s degree in Computer Science, Information Technology, or a related field, supplemented by relevant GRC certifications.
• A minimum of 5 years of relevant experience, with a preference for candidates possessing hands-on experience in consulting or MSSP environments.
• Familiarity with GRC platforms and tools, and a keen understanding of cybersecurity trends and hacking techniques.
• Previous experience with consulting on a global scale, particularly in regions with diverse regulatory requirements.
• Certifications in GRC-related disciplines such as CISA, CISSP, CRISC, or similar.