Senior GRC & IT Audit Consultant

About the role

The Senior GRC & IT Audit Consultant leads cybersecurity governance, risk management, compliance and audit engagements for a portfolio of clients across multiple industries. You will assess security maturity, identify gaps, and deliver strategic recommendations that align security initiatives with business objectives.

Key responsibilities

• Lead GRC, cybersecurity and IT audit engagements, including risk assessments, gap analyses and maturity assessments.
• Develop, review and implement cybersecurity policies, standards and governance frameworks.
• Perform IT and information security audits, evaluate controls and provide remediation guidance.
• Conduct compliance assessments against ISO 27001, NIST CSF, NCA ECC, SAMA, GDPR, PCI DSS and other relevant regulations.
• Maintain risk registers, monitor remediation plans and support enterprise risk management.
• Support incident‑response governance, post‑incident reviews and regulatory reporting.
• Prepare executive reports, dashboards and client deliverables.
• Mentor junior consultants and improve GRC and audit methodologies.
• Lead ITSM implementation and process improvement aligned with ISO/IEC 20000 and ITIL best practices.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a related field.
• 4–6 years of experience in cybersecurity GRC, IT audit, information security or consulting.
• Professional certifications such as CISA, CRISC, CISSP, CISM or ISO 27001 Lead Auditor/Implementer are preferred.
• Strong knowledge of cybersecurity frameworks and regulations.
• Excellent analytical, communication and stakeholder‑management skills.
• Fluency in English; Arabic or French is an advantage.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• GDPR
• PCI DSS
• COBIT
• ISO/IEC 20000
• ITIL
• GRC platforms
• IT audit methodologies
• Cybersecurity technologies