Summary
CCDS provides IT and cybersecurity services and is hiring a Cybersecurity GRC Consultant in Riyadh. The consultant will develop and maintain cybersecurity policies and controls, assess risks and gaps against SAMA and NCA requirements, and coordinate audits and remediation. The role also prepares governance reports and works with technical teams to monitor security controls. Applicants need a relevant bachelor’s degree, at least 3 years of related experience, and Saudi nationality; candidates must be eligible to work in Riyadh.
The posting
As published on ccds.ws. Pulled from the employer's site and shown as they wrote it.
CCDS is an IT and cybersecurity services company delivering end-to-end enterprise security solutions for organizations that need to strengthen compliance and reduce cyber risk. Working across the Information Technology and Services sector, the company helps clients build resilient security programs, align with critical regulatory expectations, and protect their operations against evolving cyber threats.
In this role, you will support clients in building stronger governance, risk, and compliance capabilities across their cybersecurity environments. This is an opportunity to contribute to high-impact compliance initiatives, work closely with cross-functional stakeholders, and help organizations navigate complex regulatory requirements with clarity, structure, and confidence.
Responsibilities
- Develop and maintain cybersecurity GRC policies, standards, and control procedures.
- Conduct risk assessments and gap analyses against SAMA and NCA requirements.
- Coordinate compliance audits and track remediation of identified control deficiencies.
- Prepare governance reports, risk dashboards, and compliance documentation for stakeholders.
- Collaborate with technical teams to implement and monitor security controls effectively.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- Strong knowledge of SAMA and NCA cybersecurity requirements.
- Eligible to work in Riyadh
- Saudi Nationality is a must.
Qualifications
- 3+ years of experience in cybersecurity GRC, risk, or compliance roles.
- Experience conducting compliance audits, risk assessments, and control gap analyses.
- Strong knowledge of ISO 27001 and NIST frameworks.
- Experience presenting governance or risk reports to leadership and coordinating with auditors.
- CISM, CISA, CRISC, or ISO 27001 Lead Implementer certification.
Benefits
- Medical Insurance
- Paid Time Off
- Training & Development
- Performance Bonus