it grc consultant

Inbox Business Technologies

<div>We are seeking a highly experienced Senior Consultant with strong expertise in Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC). The ideal candidate should have a proven track record of implementing and auditing ISO 27001, developing and designing IT GRC frameworks based on COBIT, NIST, and conducting risk assessments to ensure compliance with industry standards and regulations, like GDPR, SAMA, NESA, NCA, PDPL etc.
Job Description:
ISMS Responsibilities:<ul><li>
Lead the implementation, management, and auditing of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and develop corrective action plans.</li><li>
Conduct risk assessments and ensure risk mitigation strategies are aligned with business objectives.</li><li>
Develop and refine ISMS policies, procedures, and controls in compliance with ISO 27001 and other relevant standards.</li><li>
Support clients in achieving and maintaining ISO 27001 certification, including audit readiness.</li><li>
Provide guidance on security incident management and business continuity planning.</li></ul>
IT GRC Responsibilities:<ul><li>
Develop and implement IT governance frameworks based on COBIT, NIST, and other best practices.</li><li>
Conduct IT risk assessments and define risk treatment plans.</li><li>
Ensure compliance with regulatory requirements such as GDPR, NIST, GDPR, and local cybersecurity regulations.</li><li>
Design and implement IT compliance and risk management programs, policies, and controls.</li><li>
Provide advisory services on third-party/vendor risk management.</li><li>
Assist organizations in aligning IT strategy with business objectives through effective governance practices.</li></ul>
Requirements<ul>
<li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Computer Science, or IT-related field.</li>
<li>Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISSP, CISA, or COBIT 2019 Foundation.</li>
<li>Experience: Minimum 6&ndash;8 years of experience in ISMS and IT GRC consulting, implementation, or auditing.</li>
<li>Hands-on experience in conducting ISO 27001 gap assessments, risk assessments, and audits.</li>
<li>Strong practical knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li>
<li>Experience in handling regulatory compliance requirements such as GDPR, NIST, and PCI-DSS.</li>
<li>Excellent report writing, communication, and stakeholder management skills.</li></ul></div>

Senior Consultant - ISMS/GRC

<div>Job Summary:
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.<h3 class="jobSectionHeader">
Job Description:</h3>
ISMS Responsibilities:<ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul>
IT GRC Responsibilities:<ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul>
Requirements<ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul></div>

Consultant - ISMS/GRC

<div>
 
 Job Summary:
 
 
 
 We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.
 
 
 
 Job Description:
 
 
 
 
 ISMS Responsibilities:
 
 
 
 <ul>
 <li>
 Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).
 </li>
 <li>
 Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.
 </li>
 <li>
 Participate in risk assessments and help develop mitigation strategies.
 </li>
 <li>
 Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.
 </li>
 <li>
 Prepare documentation and provide support during ISO 27001 certification audits.
 </li>
 <li>
 Conduct security awareness training and incident management processes.
 
 
 </li>
 </ul>
 
 IT GRC Responsibilities:
 
 
 
 <ul>
 <li>
 Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).
 </li>
 <li>
 Support IT risk assessments, compliance audits, and regulatory reporting activities.
 </li>
 <li>
 Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.
 </li>
 <li>
 Support in developing and maintaining IT compliance programs and policies.
 </li>
 <li>
 Contribute to the development and implementation of GRC tools and processes.
 </li>
 <li>
 Participate in internal audits and help clients prepare for external certification audits/compliance checks.
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Minimum Bachelor's degree in Information Security, Computer Science, or a related field.
 </li>
 <li>
 Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.
 </li>
 <li>
 Experience: 3-4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.
 </li>
 <li>
 Familiarity with ISO 27001 gap assessments, risk assessments, and audits.
 </li>
 <li>
 Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).
 </li>
 <li>
 Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.
 </li>
 <li>
 Strong documentation, report writing, and communication skills is a must.
 </li>
 </ul>
</div>

DXC Technology

<div>
 
 Job Description
 
 
 
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 The SAP GRC Consultant is responsible for designing, implementing, and supporting SAP Governance, Risk, and Compliance (GRC) solutions to strengthen internal controls, risk management, user access governance, and compliance reporting. The consultant will work closely with security, audit, and business stakeholders to ensure regulatory adherence (SOX, IFRS, ISO, local compliance) and alignment with enterprise risk management frameworks.
 
 
 
 Key Process &amp; Technical Knowledge
 
 
 
 
 The Consultant Should Have Strong Expertise In
 
 
 
 
 SAP GRC Access Control (AC):
 
 
 
 <ul>
 <li>
 User Access Management (UAR)
 </li>
 <li>
 Emergency Access Management (EAM / Firefighter)
 </li>
 <li>
 Access Risk Analysis (ARA)
 </li>
 <li>
 Business Role Management (BRM)
 
 
 </li>
 </ul>
 
 SAP GRC Process Control (PC)
 
 
 
 <ul>
 <li>
 Control design, documentation, monitoring, and testing
 </li>
 <li>
 Continuous Control Monitoring (CCM)
 </li>
 <li>
 Policy management &amp; workflow
 
 
 </li>
 </ul>
 
 SAP GRC Risk Management (RM)
 
 
 
 <ul>
 <li>
 Enterprise Risk Management framework configuration
 </li>
 <li>
 Risk assessment methodologies
 </li>
 <li>
 Key Risk Indicators (KRIs)
 
 
 </li>
 </ul>
 
 SAP Audit Management (AM)
 
 
 
 <ul>
 <li>
 Planning and execution of audit engagements
 </li>
 <li>
 Integration with risk and process control
 </li>
 <li>
 Audit reporting and follow-up tracking
 
 
 </li>
 </ul>
 
 Integration Skills
 
 
 
 <ul>
 <li>
 SAP GRC with SAP S/4HANA security concepts
 </li>
 <li>
 Interfaces with Identity Management (IDM) and LDAP/AD
 </li>
 <li>
 Understanding of SoD (Segregation of Duties) frameworks
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams
 </li>
 <li>
 Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules
 </li>
 <li>
 Perform SoD analysis, remediation, and mitigating control design
 </li>
 <li>
 Implement workflow automation for user provisioning and access approvals
 </li>
 <li>
 Support business role design and access governance
 </li>
 <li>
 Enable continuous monitoring of controls and risks in SAP and non-SAP environments
 </li>
 <li>
 Provide expertise during internal and external audits
 </li>
 <li>
 Deliver end-user and key-user training on SAP GRC functionalities
 </li>
 <li>
 Work closely with Basis and Security teams to ensure compliance with corporate IT policies
 </li>
 <li>
 Support cutover, hypercare, and ongoing compliance operations
 
 
 </li>
 </ul>
 
 Required Qualifications &amp; Skills
 
 
 
 
 Education &amp; Certifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Systems, Computer Science, Finance, or related field
 </li>
 <li>
 SAP GRC Certification (preferred)
 </li>
 <li>
 CISA, CISM, CRISC, or similar audit/security certifications (advantage)
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 5&ndash;8 years in SAP Security &amp; Compliance, with minimum 3 years in SAP GRC
 </li>
 <li>
 Hands-on implementation/support in Access Control + at least one of PC/RM/AM
 </li>
 <li>
 Experience with SoD rule set customization and remediation
 </li>
 <li>
 Exposure to compliance frameworks like SOX, GDPR, ISO 27001, NCA/NCA ECC
 
 
 </li>
 </ul>
 
 Technical Skills
 
 
 
 <ul>
 <li>
 Strong knowledge of SAP authorization concepts (roles, profiles, SUIM, SU24, PFCG)
 </li>
 <li>
 Expertise in GRC workflow, BRF+, MSMP configuration
 </li>
 <li>
 Understanding of connector setup between GRC and SAP systems
 </li>
 <li>
 Familiarity with audit and risk management best practices
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Excellent communication for engaging business, audit, and IT teams
 </li>
 <li>
 Ability to work under compliance pressure and deadlines
 
 
 </li>
 </ul>
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 
 Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available
 
 here
 
 
 .
 
 
</div>

SAP GRC / Audit / Risk Management

Intertec Systems

<div>
 
 Skills:
 
 
 GRC Platforms, RFP/RFI Response, Presales, RSA Archer, ServiceNow, Swiss GRC, RiskConnect, Solution Demonstrations,
 
 
 
 Job Title: PreSales Consultant - GRC (Governance, Risk &amp; Compliance) Tools
 
 
 
 Location: Dubai, UAE
 
 
 Department: CIMS
 
 
 
 Position Overview
 
 
 
 We are seeking a dynamic and knowledgeable PreSales Consultant specializing in GRC tools to support our sales team in driving business growth. The ideal candidate will possess deep expertise in GRC platforms (e.g., Archer), understand customer pain points, and translate technical capabilities into business value.
 
 
 
 Key Responsibilities
 
 
 
 Engage with clients to understand their GRC requirements and challenges.
 
 
 Design and present tailored GRC solutions that align with client needs.
 
 
 Conduct product demonstrations, workshops, and proof-of-concepts.
 
 
 Collaborate with sales teams to develop winning strategies and proposals.
 
 
 Respond to RFPs/RFIs with detailed technical and functional inputs.
 
 
 Support deal closure by addressing technical objections and compliance concerns.
 
 
 Maintain deep knowledge of leading GRC platforms and their modules (Risk Management, Compliance, Audit, Policy Management, etc.).
 
 
 Stay updated on industry trends, regulatory changes, and competitor offerings.
 
 
 Act as a trusted advisor to clients, building strong relationships with decision-makers.
 
 
 Liaise with internal teams (Product, Delivery, Legal) to ensure solution feasibility and compliance.
 
 
 Prepare solution architecture documents, presentations, and technical write-ups.
 
 
 Provide feedback to product teams for enhancements based on client interactions.
 
 
 
 Qualifications &amp; Skills
 
 
 
 Bachelors degree in computer science, Information Security, or related field.
 
 
 5+ years of experience in PreSales or Solution Consulting roles on GRC Tools.
 
 
 Hands-on experience with GRC platforms like Archer, ServiceNow GRC, Swiss GRC, or RiskConnect/Camms or similar tools.
 
 
 Strong understanding of risk frameworks (ISO 31000, NIST, COBIT, etc.) and regulatory standards (GDPR, SOX, HIPAA).
 
 
 Excellent communication, presentation, and stakeholder management skills.
 
 
 Ability to translate complex technical concepts into business language.
 
 
 
 Preferred Certifications
 
 
 
 <ul>
 <li>
 Certified Information Systems Auditor (CISA)
 </li>
 <li>
 Certified in Risk and Information Systems Control (CRISC)
 </li>
 <li>
 OEM Certifications on GRC
 </li>
 </ul>
</div>

Presales Consultant – GRC Tools

Search 10000+ It grc consultant jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 it grc consultant jobs NEAR_ME

Senior Consultant - ISMS/GRC

Consultant - ISMS/GRC

Consultant - ISMS/GRC

Consultant - ISMS/GRC

Consultant - ISMS/GRC

SAP GRC / Audit / Risk Management

Presales Consultant – GRC Tools