GRC Consultant

Extelligence is an intelligent partner that goes the extra mile. We provide customized information management solutions for major industries. Our team in Prague and Bucharest is working with international companies, transforming, and adding value to their business on a daily basis. We are growing quickly, and we are interested to bring more talented individuals into our team.

Key Responsibilities:

Governance, Risk, and Compliance (GRC) framework design and implementation* aligned with international standards (ISO 27001, NIST CSF) and Saudi regulations (NESA, CISO guidelines, SAR 3/4, ICO policies).Conduct risk assessments and develop risk treatment plans

Map controls to regulatory requirements and business processes

Regulatory compliance delivery* for Saudi market specifics, including data protection, privacy, and cyber security mandates

Prepare and maintain policies, standards, procedures, and evidence for audits

Security program development and maturity* assessments

Develop roadmaps, governance rituals (Steering Committees, risk registers, KRIs)

Third-party risk management* and vendor security assessments

ICT supplier due diligence, contractual security clauses, and ongoing monitoring

Security awareness and training* programs tailored to local teams

Audit readiness and remediation* support

Facilitate internal/external audits and track corrective actions

Important to have:

Knowledge of Sabsa framework.

Knowledge of Saudi NCA regulations

Working with Extelligence:

We take care of the important things that matter to contractors, for example, we guarantee on-time payment for your work. You will never have to chase us for payment.

We always seek to have long term relationships with our team and we always seek to offer opportunities to extend cooperation beyond the first contract or project.

Extelligence is a multicultural team, we have more than 15 different nationalities working with us.

We also organize events to bring our team together including team building activities and social events.