Cybersecurity GRC Manager

The Cybersecurity GRC Manager will safeguard the organisation against cybersecurity risk and ensure compliance with regulatory requirements.

This role will ensure effective mitigation of cyber risks while maintaining compliance with relevant regulations and standards.

This role will be based in the Tabuk region of Saudi Arabia.

Client Details

Our client is one of the iconic Saudi Vision 2030 mega-projects.

Description

The Cybersecurity GRC Manager will be responsible for:
Strategic planning and oversight of Cybersecurity GRC programManaging members of the Cybersecurity GRC teamWorking closely and collaborating with other Cybersecurity functionsEnsuring cybersecurity compliance with regulatory requirements (NCA, NDMO, etc.)Developing and maintaining the cybersecurity governance framework, including policies, procedures, standards, etc.Establishing cybersecurity standards and baselinesProcedure documentation, policy communication, policy enforcement, policy reviews/updatesCybersecurity risk asssessmentsRisk mitigation strategiesRisk registerThird party cybersecurity risk assessmentCybersecurity awareness trainingWorking closely with Audit to conduct cybersecurity auditsBuilding and managing relationships with senior stakeholders across the organisation


Profile

The Cybersecurity GRC Manager will be/have:
At least a Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a relevant field of study (Master's would be an advantage)Relevant cybersecurity certifications (CISSP, CISM, CRISC, CISA, etc.)6+ years of experience in cybersecurity, governance, risk management, and compliance rolesPrevious experience in leading Cybersecurity GRC programs within large, complex organisationsStrong knowledge of Saudi regulatory requirements related to cybersecurity such as NCA, NDMO, CST, etc.Deep understanding of cybersecurity risk management, threat landscapes, vulnerabilities, and attack vectorsFamiliarity with cybersecurity governance frameworks such as NIST Cybersecurity Framework, ISO 27001, etc.Ability to lead and motivate a teamAbility to work in a fast-paced organisation with ever-changing cybersecurity requirementsAbility to interact with stakeholders from different departments and across all levels of the organisationAbility to simplify and articulate complex Cybersecurity GRC mattersStrong written/verbal communication skillsBased in/willing to relocate to Tabuk region


Job Offer

An attractive salary package, along with benefits, will be on offer for the Cybersecurity GRC Manager.