Cybersecurity & GRC

Company Description

ECOVIS Al Sabti, based in the Kingdom of Saudi Arabia, is a member firm of the ECOVIS International network, a leading global consulting organization rooted in Continental Europe.

Operating in more than 95 countries with over 11,000 professionals, ECOVIS delivers audit, assurance, financial advisory, enterprise risk management, cybersecurity, business continuity, data management, technology, tax, and accounting services to clients across diverse industries. The firm focuses on providing high-quality, tailored solutions by combining global expertise with strong local market insight.

ECOVIS is recognized for its innovative client service model, commitment to excellence, and ability to support clients in achieving their strategic and operational goals. A key differentiator is the blend of personalized local advice with the broad capabilities of a global professional network.

Role Description

Develop and maintain Cybersecurity policies, frameworks, and controls aligned with local regulations and industry standards ( NCA standards, SAMA framework, ISO 27001, NIST, SOC 2, etc.).

Conduct risk assessments, gap analyses, and audits to identify vulnerabilities and ensure regulatory compliance across the engagements.

Support clients in managing Cybersecurity risks, third-party risk, projects, and vendor assessments.

Monitor and report on security controls, KPIs, and compliance posture through periodic compliance reviews.

Assist in driving security awareness, tabletop exercises, and continuous improvement of clients' security programs.

Capable of administering/monitoring SIEM platforms to enhance log ingestion, correlation rules, and real-time threat detection capabilities in support of SOC operations.

Qualifications

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or related field.
• Understanding of IT & Cybersecurity infrastructure systems.A minimum of 2 -5 years of experience is required in a related field.
• Certifications such as CISA, CISM, CISSP etc. are preferred.
• Proficiency is Microsoft Office (Word, Excel, PowerPoint).
• Ability to work in a team environment and adapt to a fast-paced work culture.