Chief Cyber GRC & Assurance Leader

بنك مسقط; Muscat; On-site; OMR 120,000 - 170,000; Full time

Job summary

Bank Muscat in Oman is seeking a Head of Cyber Governance, Risk and Compliance (GRC) to lead the IT GRC function and coordinate audits, regulatory engagements, and 1LOD/1.5LOD risk activities within the enterprise risk framework.

The role shapes security standards, runs RCSAs, monitors KPIs, reports on control performance, and aligns 1LOD/2LOD requirements with regulatory banking standards.

Qualifications

• 10+ years in IT/cyber GRC, IT audit, or security management in financial services.
• Minimum 4 years leading GRC functions.
• Experience with GRC platforms and regulatory requirements.
• Knowledge of Three Lines of Defence and risk management frameworks.

Responsibilities

• Coordinate internal and external audits and regulatory engagements for 1LOD/1.5LOD.
• Govern the 1LOD control environment and report on risk posture.
• Define and maintain 1LOD security standards and control procedures.
• Manage policy adherence, exceptions, and control lifecycles.
• Lead 1LOD risk assessments, control validation, and executive reporting.
• Monitor KPIs and regulatory compliance status across 1LOD.
• Perform QA checks and internal control reviews (1.5LOD).
• Maintain the 1LOD Cyber Risk Register and treatment plans.
• Support regulatory intelligence and advisory activities for 1LOD.
• Aggregate data for independent 1.5LOD risk reports.

Skills

GRC expertise

IT risk management

Audit coordination

Regulatory compliance

Education

Bachelor's degree in Information Systems / Computer Science

Master's degree preferred

Tools

GRC platforms

Job description

Bank Muscat in Oman is seeking a Head of Cyber Governance, Risk and Compliance (GRC) to lead the IT GRC function and coordinate audits, regulatory engagements, and 1LOD/1.5LOD risk activities within the enterprise risk framework.

The role shapes security standards, runs RCSAs, monitors KPIs, reports on control performance, and aligns 1LOD/2LOD requirements with regulatory banking standards.