Security Consultant - Digital Trust and GRC

About the Job:
The IBM security consulting team provides customized solutions for clients rather than basic product installations. As a Security Consultant - Digital Trust and GRC, you will work with clients to understand their unique business issues and deliver tailored solutions. Your role involves assessing client security capabilities across policy, process, technology, and organizational areas, identifying gaps, and recommending best practices to mitigate risks.

You will provide subject matter expertise through workshops and consulting engagements, leveraging your hands-on implementation experience and deep technical knowledge of Security Governance tools. Additionally, you will assist in pre-sales, sales, closure, and organizing the delivery of security consulting services with local teams.

Work Conditions: Hybrid, Full-time
Location: Riyadh, Saudi Arabia

Required Technical and Professional Expertise:

• At least 5 years of relevant consulting experience in the Cyber Strategy and Risk domain.
• Security consulting experience across multiple client verticals, including Financial Services, Public Sector, Technology, Telecommunications, Manufacturing, Industrial & Mining.
• Experience in developing and updating security strategy, operating models, and governance models.
• Expertise in Security Governance, Security Process, Security Policy, and Standards design.
• Proven track record of executing consulting engagements related to Security Strategy, Risk & Compliance.
• Hands-on experience in Security Architecture, Cyber Strategy, and compliance with regulations such as ISO 27001, NCA, SOC 2, COBIT, NIST, PCI DSS, and GDPR.
• Strong communication and presentation skills, with the capability to lead large groups and manage client expectations.
• Ability to work efficiently in a matrix management model and project-based/client-serving environments.
• Readiness to travel.

Language Requirements:

• English: Fluent (Required)
• Arabic: Fluent (Preferred)

Preferred Technical and Professional Expertise:

• 7+ years in Governance, Risk, and Compliance (GRC) Cybersecurity.
• A Bachelor’s or Master’s degree in technology or Cybersecurity.
• Experience working with offshore teams.
• Certifications such as ISO, CISSP, CISA, CISM are preferred.
• Strong understanding of Information Technology, IT Security, and Cybersecurity.

Note: This is a KSA-based role and KSA National candidates are required.