Cybersecurity GRC Consultant at Devoteam · Riyadh

Company Description

Tech for People Unlocks the Future

At Devoteam, we believe that technology, combined with strong human values, can actively drive change for the better. Discover how Tech for People is shaping the future, creating a positive impact on individuals and the world around us.

With over 25 years of passion for technology and a presence in 18+ countries across EMEA and beyond, we are committed to leveraging innovation, expertise, and human-centric values to make a difference.

Devoteam Culture & Values:

True innovation is born from a powerful culture, fused with meaningful values.

Culture:

Fair and courageous

Everyone is treated fairly – this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.

Ambition and results

Ambition is nurtured at every step – this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.

Learning and innovating

Curiosity and learning are at our core – this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.

Caring and sharing

A caring attitude is infused into our culture – this encourages sharing. We believe in the power of teams, we promote support and collaboration.

At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers,

Values:

1. Respect

2. Frankness

3. Passion

Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.

To know more about us, please visit: www.devoteam.com

Job Description

The Cybersecurity GRC Consultant supports the design, implementation, and continuous improvement of cybersecurity governance, risk, and compliance initiatives. The role contributes to the development of governance frameworks, policies, operating models, and regulatory compliance activities while ensuring alignment with organizational objectives and Saudi cybersecurity regulations. The consultant works closely with senior consultants, architects, and client stakeholders to deliver high-quality governance artifacts and advisory services.

Qualifications

Key Responsibilities

• Support the development, implementation, and maintenance of the cybersecurity governance framework, including policies, standards, procedures, and guidelines.
• Assist in designing and improving cybersecurity governance operating models, organizational structures, and RACI matrices.
• Contribute to the development and maintenance of governance-related KPIs, KRIs, dashboards, and reporting mechanisms.
• Perform governance maturity assessments, gap analyses, and benchmarking activities against industry best practices.
• Prepare governance documentation, reports, presentations, and recommendations for client review.
• Ensure governance deliverables align with Saudi regulatory requirements, including NCA ECC, CST (formerly CITC), SAMA Cybersecurity Framework, and relevant international standards such as ISO/IEC 27001 and NIST Cybersecurity Framework.
• Support governance committees, working groups, and client workshops by preparing documentation, facilitating discussions, and tracking action items.
• Collaborate with Risk Management, Compliance, Third-Party Risk Management (TPRM), Enterprise Architecture, and Security Operations teams to ensure governance activities are integrated across cybersecurity domains.
• Assist in the review and quality assurance of governance documentation and project deliverables.
• Monitor regulatory updates and industry trends to recommend improvements to governance practices.
• Provide advisory support to clients on cybersecurity governance best practices and regulatory compliance requirements.
• Contribute to knowledge sharing, documentation, and continuous improvement initiatives within the Cybersecurity GRC practice.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.
• 3–7 years of experience in Cybersecurity Governance, Risk & Compliance (GRC), Information Security, or Cybersecurity Consulting.
• Experience in developing governance documentation, policies, standards, and cybersecurity frameworks.
• Familiarity with cybersecurity governance operating models and organizational structures.
• Experience supporting governance assessments, compliance initiatives, and regulatory audits.
• Knowledge of Saudi cybersecurity regulations and international security standards.
• Experience working within consulting, managed services, or large enterprise environments is preferred.

Additional Information

Business Unit: Strategy & Transformation

Level: Mid Level