Cyber GRC Manager: Policy, Risk & Compliance Lead

Al Jomaih Energy and Water; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading energy and water services company in Saudi Arabia is seeking a Cybersecurity GRC Manager to oversee governance, risk, and compliance programs. In this role, you will maintain cybersecurity policies, conduct assessments, and manage third-party and cloud computing risks. Ideal candidates have 3-7 years in GRC, strong Arabic and English skills, and experience with NCA frameworks. Regular travel within Saudi Arabia and occasionally to other countries is required.

Qualifications

• 3–7 years in cybersecurity GRC or audit.
• Proven work with NCA frameworks.
• Strong skills in policy writing, audit, and risk facilitation.

Responsibilities

• Maintain cybersecurity policy/standard/procedure library.
• Plan and run internal assessments.
• Maintain the cyber risk register.
• Ensure enforcement of third-party cybersecurity controls.

Skills

Cybersecurity Governance

Risk Management

Policy Writing

Audit

Compliance Assurance

Third-Party Risk Management

Bilingual (Arabic and English)

Education

Bachelor’s degree

Tools

NCA ECC‑2 Compliance Tool

Job description

A leading energy and water services company in Saudi Arabia is seeking a Cybersecurity GRC Manager to oversee governance, risk, and compliance programs. In this role, you will maintain cybersecurity policies, conduct assessments, and manage third-party and cloud computing risks. Ideal candidates have 3-7 years in GRC, strong Arabic and English skills, and experience with NCA frameworks. Regular travel within Saudi Arabia and occasionally to other countries is required.