GRC Specialist (NCSA Certification Support)

About Accenture

About Accenture Security

Role Overview

Key Functions

• Lead and support compliance initiatives aligned with **National Cybersecurity Authority (NCSA)** frameworks, with a strong focus on **ECC** requirements
• Perform gap assessments and map existing organizational controls against NCSA, ISO 27001, and NIST frameworks
• Drive remediation activities, track corrective actions, and ensure timely closure of identified gaps
• Prepare organizations for **NCSA certification audits**, internal assessments, and external regulatory reviews

Responsibilities

• Implement, maintain, and continuously improve **GRC policies, standards, procedures, and control frameworks**
• Conduct cybersecurity **risk assessments**, maintain risk registers, and support risk treatment plans
• Design, implement, and test security controls aligned with **ISO 27001, NIST, and NCSA ECC** requirements
• Develop and manage compliance documentation, including policies, procedures, control evidence, and audit artifacts
• Act as a primary point of contact for **internal and external auditors**, supporting evidence collection and audit coordination
• Collaborate with IT, security, cloud, and business stakeholders to ensure effective implementation of security controls
• Translate complex regulatory and compliance requirements into **practical, technical, and operational actions**
• Monitor compliance posture, prepare status reports, and present findings to stakeholders and leadership
• Track updates to NCSA regulations and assess their impact on organizational security posture
• Drive **continuous improvement** in control effectiveness, maturity, and overall cybersecurity governance

Qualifications

• **4 to 7 years** of experience in **GRC, cybersecurity compliance, or risk management**
• Hands-on experience with **NCSA frameworks**, with **ECC experience required**
• Proven experience supporting **audits, certifications, and regulatory assessments**
• Strong understanding of risk assessment methodologies and security control frameworks
• Practical experience with **ISO 27001 and NIST** standards
• Ability to map and align controls across multiple regulatory and industry frameworks
• Familiarity with **cloud environments** (AWS, Azure, or GCP is a plus)
• Experience using **GRC tools** such as Archer, ServiceNow GRC, or similar platforms
• Strong documentation, reporting, and evidence management skills
• Ability to work independently and own deliverables end-to-end
• Fluency in **Arabic and English** is mandatory.