Cyber GRC Lead for Global Event & Data Protection

Talent Blueprint FZ LLC; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

Talent Blueprint FZ LLC in Riyadh seeks an experienced Cybersecurity GRC Specialist to lead the organization's governance, risk and compliance for a major international football event project in Saudi Arabia.

You will own and manage the GRC program, develop policies, maintain risk registers, coordinate audits, and oversee data protection throughout the event lifecycle, collaborating with Legal, Procurement, vendors, and senior leadership to meet regulatory and security requirements.

Qualifications

• 3+ years of relevant experience in Cybersecurity GRC, Information Security GRC, or Risk management.
• Proven experience managing governance, risk, and compliance programs.
• Strong experience developing policies, standards, procedures, and controls.
• Experience maintaining risk registers and conducting risk assessments.
• Experience with third-party/vendor cybersecurity risk management and due diligence.

Responsibilities

• Own and lead the organization's Cybersecurity Governance, Risk, and Compliance (GRC) program end to end.
• Develop, maintain, review, and secure executive approval for cybersecurity policies, standards, procedures, and governance frameworks.
• Own and continuously maintain the cybersecurity risk register, ensuring risks are identified, assessed, tracked, and appropriately treated.
• Lead periodic and event-driven cybersecurity risk assessments across technology, applications, vendors, and event operations.
• Coordinate cybersecurity compliance self-assessments, third-party audits, and regulator-led audits where applicable.
• Manage third-party and vendor cybersecurity risk assessments, including security due diligence, risk identification, remediation tracking, and ongoing monitoring.
• Support cybersecurity risk management across the significant number of vendors, contractors, sponsors, broadcasters, ticketing providers, hospitality partners, and technology suppliers involved in the event.
• Own the organization's data protection compliance program in coordination with Legal and relevant business stakeholders.
• Review and manage data protection requirements associated with personal data processed throughout the event lifecycle.
• Support and coordinate Data Processing Agreements (DPAs) and related security/data protection requirements with sponsors, broadcasters, ticketing vendors, and other third parties.
• Develop and manage the organization's cybersecurity awareness and training program.
• Maintain the policy exception and risk acceptance process, ensuring exceptions are documented, risk assessed, approved, and periodically reviewed.
• Establish and report cybersecurity GRC and compliance KPIs to senior leadership.
• Support post-incident reviews from a regulatory, compliance, reporting, and disclosure-obligation perspective.
• Monitor changes in applicable cybersecurity and data protection requirements and assess their impact on the organization.
• Provide guidance to business and technology teams on cybersecurity governance, risk, compliance, and third-party security requirements.
• Work closely with the Cybersecurity Architecture Manager and Cybersecurity Defense Manager to ensure governance and risk requirements are incorporated into cybersecurity architecture and defense operations.
• Maintain appropriate documentation and evidence to demonstrate compliance and audit readiness throughout the project lifecycle.

Skills

Governance

Risk management

Compliance

Policy development

Stakeholder management

Audits

Data protection

Communication

Job description

Talent Blueprint FZ LLC in Riyadh seeks an experienced Cybersecurity GRC Specialist to lead the organization's governance, risk and compliance for a major international football event project in Saudi Arabia.

You will own and manage the GRC program, develop policies, maintain risk registers, coordinate audits, and oversee data protection throughout the event lifecycle, collaborating with Legal, Procurement, vendors, and senior leadership to meet regulatory and security requirements.