GRC Principal Consultant (RE)

Role Overview

GRC Principal Consultant at Innovative Solutions, headquartered in Riyadh with offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi.

Company Overview

Innovative Solutions is a leading Cybersecurity company established in 2003. We specialize in delivering comprehensive cybersecurity solutions and services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is delivering secure and intelligent digital services that empower organizations.

Role Purpose

Lead strategic initiatives focused on Governance, Risk, and Compliance by providing expert advisory services to clients, developing and implementing robust frameworks, and guiding clients in aligning their risk and compliance strategies.

Key Responsibilities

Risk Management

• Implement and manage cybersecurity risk management and compliance programs.
• Conduct annual cybersecurity risk assessments and identify potential threats and vulnerabilities.
• Develop and execute risk treatment and mitigation plans.
• Monitor and track cybersecurity risks and provide regular reporting to stakeholders.
• Manage third-party cybersecurity risks, including assessment and ongoing monitoring.

Compliance

• Support the implementation and operation of the cybersecurity compliance program.
• Perform annual compliance assessments and ensure continuous compliance tracking.
• Ensure adherence to relevant regulatory requirements and standards, including the NCA framework.

Operations

• Provide day-to-day operational support for cybersecurity risk and compliance activities.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Risk Management, Information Security, or a related field.
• 4+ years of experience in Governance, Risk, and Compliance.
• Strong knowledge of cybersecurity frameworks and standards, including NCA, ISO 27001, and NIST.
• Proven experience in developing and leading compliance programs.
• Relevant certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.

Skills & Competencies

• Excellent leadership, communication, and stakeholder management skills.
• Ability to work effectively with senior executives and multidisciplinary teams.
• Familiarity with AI tools and technologies.