Senior GRC & IT Audit Consultant

About the role

The Senior GRC & IT Audit Consultant leads governance, risk, compliance and audit engagements for clients across multiple industries. You will assess cybersecurity maturity, identify gaps, and provide strategic advice to improve security posture while aligning initiatives with business goals.

Key responsibilities

• Lead cybersecurity governance, risk management, compliance and IT audit projects.
• Conduct risk assessments, gap analyses, maturity assessments and develop remediation plans.
• Design, review and update cybersecurity policies, standards and governance frameworks.
• Perform IT and information‑security audits, evaluate controls and deliver audit reports.
• Execute compliance assessments against ISO 27001, NIST CSF, NCA ECC, SAMA, GDPR, PCI DSS and other regulations.
• Maintain risk registers, monitor remediation, and support enterprise risk initiatives.
• Assist incident‑response governance, post‑incident reviews and regulatory reporting.
• Prepare executive dashboards, reports and client deliverables.
• Build trusted relationships with senior client stakeholders and mentor junior consultants.
• Lead ITSM implementation and ISO/IEC 20000/ITIL process improvements.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field.
• 4–6 years of experience in GRC, IT audit, information security or cybersecurity consulting.
• Professional certifications such as CISA, CRISC, CISSP, CISM or ISO 27001 Lead Auditor/Implementer are preferred.
• Strong knowledge of cybersecurity frameworks and regulations.
• Excellent analytical, communication and report‑writing skills.
• Fluency in English; Arabic or French is a plus.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• PCI DSS
• GDPR
• COBIT
• ITIL
• ISO/IEC 20000