GRC Consultant

About ExeQut ExeQut is a fast-growing consulting and technology services firm specializing in cybersecurity, IAM, cloud, AI-driven platforms and custom software engineering. We partner with public and private sector organizations to deliver high-impact digital transformation initiatives across the Kingdom of Saudi Arabia. Position Summary ExeQut is hiring an experienced, Arabic-speaking GRC Consultant – Enterprise & Cybersecurity for a 9-month project . You will develop and implement enterprise-level GRC frameworks, policies, procedures and security governance practices, ensuring they align with business objectives, regulatory requirements and cybersecurity standards. What You Will Do Design and implement enterprise GRC frameworks Lead enterprise risk management (ERM), including risk assessments and mitigation plans Develop governance policies, standards, procedures and controls Drive information security governance and cybersecurity risk management Conduct gap assessments, develop remediation plans and monitor compliance Manage regulatory compliance, internal controls and audit activities Advise stakeholders and senior management on governance, risk and compliance matters Required Qualifications 5–8+ years of relevant GRC and information security experience Proven experience designing and implementing enterprise GRC frameworks Strong expertise in enterprise risk management, risk assessments and risk mitigation Strong knowledge of information security governance and cybersecurity risk management Knowledge of ISO 27001, ISO 31000, NIST Cybersecurity Framework and COBIT Experience in regulatory compliance, internal controls and audit management Strong stakeholder management and advisory skills Fluent Arabic speaker (required) Preferred Qualifications Experience with Saudi regulatory frameworks such as NCA ECC, SAMA CSF or PDPL Certifications such as CISA, CISM, CRISC or ISO 27001 Lead Implementer/Auditor Experience on consulting engagements with public or private sector clients What We Offer Competitive compensation Exposure to high-impact projects with leading clients in Saudi Arabia Work alongside experienced cybersecurity and consulting leadership A collaborative, growth-oriented culture If you're a GRC specialist who turns complex regulations into clear, practical governance, we'd love to have you on board. Let's build something great together