Cyber GRC Leader: Governance, Risk & Compliance

Confidential; Dhahran Compound; On-site; SAR 300,000 - 520,000; Full time

Job summary

Confidential in Saudi Arabia is seeking a senior cybersecurity leader to oversee governance, risk and compliance across the organization. You will maintain the governance framework, manage enterprise risk, ensure regulatory alignment and drive continuous improvement of the cybersecurity program.

You will coordinate audits, monitor remediation, develop KPIs for executives, and partner with IT and business stakeholders to raise cybersecurity maturity and awareness across the company.

Qualifications

• Bachelor's degree in computer science, MIS or equivalent.
• 8+ years of relevant experience in cybersecurity.

Responsibilities

• Maintain the cybersecurity governance framework
• Manage the enterprise cybersecurity risk management program
• Ensure compliance with applicable regulations and standards
• Oversee cybersecurity policy lifecycle management
• Coordinate cybersecurity audits and regulatory assessments
• Monitor remediation activities and compliance performance
• Develop cybersecurity KPIs and executive reports
• Manage third-party cybersecurity risk program
• Promote cybersecurity awareness across the organization
• Drive cybersecurity maturity improvement initiatives
• Provide governance guidance to business and IT stakeholders

Skills

Governance

Risk management

Regulatory compliance

Policy management

Audit coordination

KPIs reporting

Third-party risk

Cybersecurity awareness

Maturity improvement

Education

Bachelor's degree in CS / MIS

Job description

Confidential in Saudi Arabia is seeking a senior cybersecurity leader to oversee governance, risk and compliance across the organization. You will maintain the governance framework, manage enterprise risk, ensure regulatory alignment and drive continuous improvement of the cybersecurity program.

You will coordinate audits, monitor remediation, develop KPIs for executives, and partner with IT and business stakeholders to raise cybersecurity maturity and awareness across the company.