Cybersecurity GRC Manager

Beyond ONE; Dubai; Hybrid; AED 120,000 - 200,000; Full time

Job summary

A prominent cybersecurity firm in Dubai is seeking a Cybersecurity GRC Manager to strengthen its cybersecurity governance across GCC and LATAM regions. The successful candidate will lead the implementation of a GRC framework while managing compliance with various regulatory standards. This role offers opportunities to shape global security strategies and foster a cybersecurity risk-aware culture. The ideal candidate should possess a Bachelor's degree in Cybersecurity and 7 years of relevant experience, preferably in a multinational setting, with additional benefits including a hybrid work environment.

Benefits

Rapid learning opportunities

Hybrid work environment

Healthcare benefits

Qualifications

• 7 years in cybersecurity with at least 3 years in a GRC leadership or advisory role.
• Experience within multinational environments, especially in telecom, fintech, or critical infrastructure.
• Strong familiarity with GCC regulatory frameworks; LATAM experience is an added advantage.

Responsibilities

• Lead the development and implementation of Cybersecurity GRC framework across operating companies.
• Ensure enterprise cybersecurity policies and control frameworks are adhered to.
• Report on cybersecurity risks related to business objectives and operations.

Skills

Cybersecurity Governance

Risk Assessment

Regulatory Compliance

Stakeholder Communication

Education

Bachelor’s degree in Cybersecurity or related field

Master’s degree in Information Security or Risk Management

Certifications: CISSP, CISM, CRISC

Tools

ISO/IEC 27001

NIST CSF

CIS Controls

Job description

Role Purpose

Why this role matters:

As a Cybersecurity GRC Manager you will play a key role in strengthening Beyond ONE’s resilience against evolving cyber threats. You will lead the charge in unifying our cybersecurity governance, risk and compliance practices across diverse regulatory landscapes in the GCC and LATAM regions. Your contributions will help shape our global security program, enabling secure operations and strategic alignment across our operating companies and ultimately the way we disrupt the market.

What success looks like:

In your first year you will develop and implement a standardized GRC framework across all OpCos, complete regional cybersecurity risk assessments with executive reporting, and ensure measurable improvements in compliance maturity benchmarks in both GCC and LATAM.

Why this is for you:

If you’re keen on solving the global cybersecurity governance puzzle, we’re looking for someone ready to tackle this challenge head‑on and make an impact from day one.

Key Responsibilities

In this role you will:

• Lead the ongoing development and implementation of Beyond ONE’s Cybersecurity Governance, Risk and Compliance (GRC) framework across GCC and LATAM operating companies.
• Ensure enterprise cybersecurity policies, standards and control frameworks (e.g. CRF, ISO/IEC 27001, NIST CSF, CIS Controls) are developed, implemented and adhered to across regional subsidiaries.Identify and assess cybersecurity risks related to business objectives and technology operations and report on them accordingly.
• Coordinate and support periodic internal and external cybersecurity audits, regulatory reviews and assessments.
• Maintain and manage the risk register ensuring risks are documented, assessed and tracked in alignment with the risk management framework.
• Interface with local GRC professionals in each OpCo to harmonize compliance controls and address country‑specific regulatory requirements.
• Evaluate and monitor the maturity of cybersecurity practices and propose continuous improvement strategies.
• Present key findings, risk exposures and recommendations to the CISO and executive management.
• Stay informed on regulatory changes for the countries within GCC and LATAM and assess their impact on Beyond ONE’s compliance posture.
• Foster a strong cybersecurity risk‑awareness culture across business lines through training and awareness programs.

Qualifications & Attributes

We’re seeking someone who embodies the following:

Education:

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or related field (required).
• Master’s degree in Information Security or Risk Management (preferred).
• Certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor (highly desirable).

Experience:

• 7 years in cybersecurity with at least 3 years in a GRC leadership or advisory role.
• Experience operating within multinational environments, preferably in telecom, fintech or critical infrastructure.
• Strong familiarity with GCC regulatory frameworks; LATAM experience is a plus.
• Proven ability to communicate and influence across executive and regulatory stakeholders.

What we offer:

• Rapid learning opportunities; we enable learning through flexible career paths and exposure to challenging & meaningful work that will help build and strengthen your expertise.
• Hybrid work environment – flexibility to work from home 2 days a week.
• Healthcare and other local benefits offered in market.

By submitting your application you acknowledge and consent to the use of Greenhouse & BrightHire during the recruitment process. This may include the storage and processing of your data on servers located outside your country of residence. For further information please contact us at

Required Experience:

Manager