About Devoteam and the Role

Devoteam is seeking a dedicated Cybersecurity GRC Consultant to join its team in Riyadh, Saudi Arabia. This full-time position involves supporting the design, implementation, and continuous improvement of cybersecurity governance, risk, and compliance initiatives for clients.

Role Overview

The Cybersecurity GRC Consultant will contribute to the development of governance frameworks, policies, operating models, and regulatory compliance activities. This role ensures alignment with organizational objectives and adherence to Saudi cybersecurity regulations. The consultant will work closely with senior consultants, architects, and client stakeholders to deliver high-quality governance artifacts and advisory services.

Key Responsibilities

• Support the development, implementation, and maintenance of cybersecurity governance frameworks, including policies, standards, procedures, and guidelines.
• Assist in designing and improving cybersecurity governance operating models, organizational structures, and RACI matrices.
• Contribute to the development and maintenance of governance-related KPIs, KRIs, dashboards, and reporting mechanisms.
• Perform governance maturity assessments, gap analyses, and benchmarking activities against industry best practices.
• Prepare governance documentation, reports, presentations, and recommendations for client review.
• Ensure governance deliverables align with Saudi regulatory requirements, including NCA ECC, CST, SAMA Cybersecurity Framework, and relevant international standards such as ISO/IEC 27001 and NIST Cybersecurity Framework.
• Support governance committees, working groups, and client workshops by preparing documentation, facilitating discussions, and tracking action items.
• Collaborate with Risk Management, Compliance, Third-Party Risk Management (TPRM), Enterprise Architecture, and Security Operations teams to integrate governance activities across cybersecurity domains.
• Assist in the review and quality assurance of governance documentation and project deliverables.
• Monitor regulatory updates and industry trends to recommend improvements to governance practices.
• Provide advisory support to clients on cybersecurity governance best practices and regulatory compliance requirements.
• Contribute to knowledge sharing, documentation, and continuous improvement initiatives within the Cybersecurity GRC practice.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related discipline.

Experience and Skills

• 3–7 years of experience in Cybersecurity Governance, Risk & Compliance (GRC), Information Security, or Cybersecurity Consulting.
• Demonstrated experience in developing governance documentation, policies, standards, and cybersecurity frameworks.
• Familiarity with cybersecurity governance operating models and organizational structures.
• Experience supporting governance assessments, compliance initiatives, and regulatory audits.
• Knowledge of Saudi cybersecurity regulations and international security standards.
• Experience working within consulting, managed services, or large enterprise environments is preferred.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, offering an opportunity to work with diverse client stakeholders in a dynamic consulting environment.