استشاري حوكمة ومخاطر والتزام (GRC)

About ExeQut
ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia.

Position Summary
ExeQut is hiring an experienced, Arabic-speaking GRC Consultant Enterprise & Cybersecurity for a 9-month project. You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices, ensuring they align with business objectives, regulatory requirements and cybersecurity standards.

What You Will Do

• Design and implement enterprise GRC frameworks
• Lead enterprise risk management (ERM), including risk assessments and mitigation plans
• Develop governance policies, standards, procedures and controls
• Drive information security governance and cybersecurity risk management
• Conduct gap assessments, develop remediation plans and monitor compliance
• Manage regulatory compliance, internal controls and audit activities
• Advise stakeholders and senior management on governance, risk and compliance matters

Preferred Qualifications

• Experience with Saudi regulatory frameworks such as NCA ECC, SAMA CSF or PDPL
• Certifications such as CISA, CISM, CRISC or ISO 27001 Lead Implementer/Auditor
• Experience on consulting engagements with public or private sector clients

What We Offer

• Competitive compensation
• Exposure to high-impact projects with leading clients in Saudi Arabia
• Work alongside experienced cybersecurity and consulting leadership
• A collaborative, growth-oriented culture

If you're a GRC specialist who turns complex regulations into clear, practical governance, we'd love to have you on board. Let's build something great together

Desired Candidate Profile

• 5 8+ years of relevant GRC and information security experience
• Proven experience designing and implementing enterprise GRC frameworks
• Strong expertise in enterprise risk management, risk assessments and risk mitigation
• Strong knowledge of information security governance and cybersecurity risk management
• Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT
• Experience in regulatory compliance, internal controls and audit management
• Strong stakeholder management and advisory skills
• Fluent Arabic speaker (required)