GRC Consultant

About ExeQut ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia. Position Summary ExeQut is hiring an experienced, Arabic-speaking GRC Consultant Enterprise & Cybersecurity for a 9-month project . You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices, ensuring they align with business objectives, regulatory requirements and cybersecurity standards. What You Will Do • Design and implement enterprise GRC frameworks • Lead enterprise risk management (ERM), including risk assessments and mitigation plans • Develop governance policies, standards, procedures and controls • Drive information security governance and cybersecurity risk management • Conduct gap assessments, develop remediation plans and monitor compliance • Manage regulatory compliance, internal controls and audit activities • Advise stakeholders and senior management on governance, risk and compliance matters Preferred Qualifications • Experience with Saudi regulatory frameworks such as NCA ECC, SAMA CSF or PDPL • Certifications such as CISA, CISM, CRISC or ISO 27001 Lead Implementer/Auditor • Experience on consulting engagements with public or private sector clients What We Offer • Competitive compensation • Exposure to high-impact projects with leading clients in Saudi Arabia • Work alongside experienced cybersecurity and consulting leadership • A collaborative, growth-oriented culture If you're a GRC specialist who turns complex regulations into clear, practical governance, we'd love to have you on board. Let's build something great together • 5 8+ years of relevant GRC and information security experience • Proven experience designing and implementing enterprise GRC frameworks • Strong expertise in enterprise risk management, risk assessments and risk mitigation • Strong knowledge of information security governance and cybersecurity risk management • Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT • Experience in regulatory compliance, internal controls and audit management • Strong stakeholder management and advisory skills • Fluent Arabic speaker (required)