GRC Consultant (ISO 27001) – Saudi National

Direct message the job poster from VaporVM

Saudi National GRC Consultant

We are seeking a highly skilled Saudi National GRC Consultant to support the Governance, Risk & Compliance (GRC) initiatives for one of EY’s key clients in Riyadh. The selected candidate will play a critical role in strengthening the organization’s ISO 27001 : 2022 Information Security Management System (ISMS) , ensuring ongoing compliance, maintaining documentation, and supporting audit readiness.

Key Responsibilities

• Develop, review, and update ISMS policies, procedures, standards, and governance documentation.
• Ensure alignment of all documentation and processes with ISO 27001 : 2022 controls and best practices.
• Drive continuous improvement across ISMS implementations.
• Conduct and support periodic risk assessments , update risk registers, and maintain security‑related documentation.
• Manage ISMS records, logs, and evidence repositories to support control validation.
• Lead and support the organization in internal and external ISO 27001 audits .
• Coordinate with internal teams, external auditors, and stakeholders to provide required evidence and responses.
• Ensure full compliance with ISO control requirements.

Reporting & Governance

Technical Advisory

Candidate Requirements

Seniority level : Mid‑Senior level

Employment type : Full‑time

Job function : Information Technology

Industries : IT Services and IT Consulting

#J-18808-Ljbffr