GRC Consultant

Job Title: GRC Consultant

Location: Saudi Arabia (Riyadh)

Experience: 5+ years

Job Description:

We are seeking an experienced GRC Consultant to join our dynamic team in Saudi Arabia. The ideal candidate will have a strong background in governance, risk, and compliance, coupled with expertise in data governance, information management, business integrity management, and regulatory compliance. The role involves working closely with clients to assess their GRC needs, develop tailored solutions, and support the implementation of GRC initiatives across various domains.

Key Responsibilities:

1. Conduct comprehensive assessments of clients' governance structures, risk management processes, and compliance frameworks, spanning areas such as data governance, business integrity management, and enterprise risk management.
2. Analyze clients' business objectives, regulatory requirements, and industry standards to develop customized GRC strategies aligned with best practices and international standards.
3. Collaborate with clients to design and implement effective governance frameworks, risk management systems, compliance programs, and business process management initiatives.
4. Provide guidance on data governance, data information management, and data transformation strategies to ensure the integrity, quality, and security of organizational data assets.
5. Assist clients in managing various risks, including cyber risks, project risks, enterprise risks, and business continuity risks, through proactive risk assessment, mitigation, and monitoring measures.
6. Support clients in achieving regulatory compliance across multiple domains, including Anti-Money Laundering (AML), General Data Protection Regulation (GDPR), International Data Warehouse (IDW), and other relevant regulations.
7. Facilitate incident management processes, including incident detection, response, investigation, and remediation, to mitigate the impact of security breaches, compliance violations, and other incidents.
8. Ensure adherence to ISO compliance standards, such as ISO 27001 (Information Security Management) and ISO 31000 (Risk Management), through policy development, implementation, and audit activities.
9. Conduct IT audits and information security assessments to identify vulnerabilities, assess controls, and recommend remediation measures to enhance security posture and regulatory compliance.
10. Provide expert advice on policy management, including the development, review, and enforcement of policies, procedures, and guidelines related to GRC, information security, and data privacy.
11. Collaborate with cross-functional teams, including IT, legal, compliance, and business units, to drive GRC initiatives, promote a culture of compliance, and foster continuous improvement.