Cybersecurity GRC Expert

Location: Riyadh, Saudi Arabia
Work Mode: On-site
Experience: 10+ Years in Cybersecurity
Joining: Immediate Joiners Only
Language: Arabic Mandatory
Candidate Location: Currently based in Saudi Arabia
Preferred Candidates: Saudi Nationals
Mandatory Certifications: CISM and CRISC

Job Overview

DWT Technology is seeking an experienced Cybersecurity GRC Expert for a long-term enterprise engagement in Riyadh, Saudi Arabia.

The ideal candidate will have extensive experience in cybersecurity governance, risk management, compliance, and Information Security Management System (ISMS) implementation. The candidate will support cybersecurity maturity assessments, regulatory compliance activities, gap analysis, and executive-level risk reporting.

The role requires strong analytical skills and the ability to communicate cybersecurity risks, compliance findings, and improvement recommendations to senior management.

Key Responsibilities

• Support cybersecurity governance frameworks and enterprise risk management programs.
• Implement, manage, and improve Information Security Management Systems (ISMS).
• Conduct cybersecurity risk assessments, maturity assessments, and gap analyses.
• Evaluate cybersecurity controls and identify compliance gaps.
• Support regulatory compliance activities and recommend appropriate remediation measures.
• Prepare executive-level reports on cybersecurity risks, compliance status, and improvement initiatives.
• Present risk insights, findings, and recommendations to senior management.
• Support the development and continuous improvement of cybersecurity governance and risk management practices.

Required Skills and Qualifications

• Minimum 10 years of professional experience in cybersecurity.
• Strong expertise in cybersecurity governance frameworks and risk management programs.
• Proven experience implementing and managing ISMS.
• Knowledge of regulatory compliance, cybersecurity maturity assessments, and gap analysis.
• Ability to prepare executive-level reports and present risk insights to senior management.
• CISM certification mandatory.
• CRISC certification mandatory.
• Arabic language proficiency mandatory.
• Must currently reside in Saudi Arabia.
• Must be available to join immediately.
• Willingness to work onsite in Riyadh, Saudi Arabia.

Preferred Qualifications

• CISSP certification.

• COBIT knowledge or certification.

• ISO 27001 Lead Implementer certification.

• ISO 27001 Lead Auditor certification.

• Minimum 10 years of professional experience in cybersecurity.

• Strong expertise in cybersecurity governance frameworks and risk management programs.

• Proven experience implementing and managing ISMS.

• Knowledge of regulatory compliance, cybersecurity maturity assessments, and gap analysis.

• Ability to prepare executive-level reports and present risk insights to senior management.

• CISM certification mandatory.

• CRISC certification mandatory.

• Arabic language proficiency mandatory.

• Must currently reside in Saudi Arabia.

• Must be available to join immediately.

• Willingness to work onsite in Riyadh, Saudi Arabia.

Preferred Qualifications

• CISSP certification.
• COBIT knowledge or certification.
• ISO 27001 Lead Implementer certification.
• ISO 27001 Lead Auditor certification.
• Saudi nationals are preferred.