Cyber GRC Manager – Strategy, Risk & Compliance

HALA; Riyadh; Hybrid; SAR 300,000 - 420,000; Full time

Benefits offered by this job

Inclusive culture with flexible work

Competitive compensation with share-s

Annual learning stipend

Diverse, multi-national team

Autonomy and mentoring

High accountability and responsibility

Job summary

HALA is seeking a senior information security leader to govern the company’s security program and lead the cyber security strategy in alignment with business goals. The role involves reporting to executive management and maintaining a strong security posture across all entities in the MENAP region.

The successful candidate will manage risk, oversee budgets, and coordinate audits and regulatory compliance with SAMA and CMA requirements, ensuring security controls are embedded in SDLC processes.

Qualifications

• Experience building and managing security governance programmes and policies.
• Ability to design and implement a company-wide cyber security strategy.
• Strong knowledge of regulatory requirements (e.g., SAMA, CMA) and risk controls.

Responsibilities

• Develop, implement, and improve the organization's Information Security Governance framework, policies, standards, and procedures.
• Lead the Cyber Security Strategy aligned with business goals and report to the board.
• Provide regular security posture updates to executive management and the board.
• Establish KPIs and metrics to measure security program effectiveness and budget usage.
• Oversee the information security budget and resource allocation to manage risk.
• Design and manage enterprise-wide Cyber Security Risk Management with BIAs and controls.
• Coordinate vendor risk management, especially cloud providers and payment gateways.
• Ensure regulatory examinations and audits are managed with timely responses.

Skills

Info Security Governance

Cyber security strategy

Regulatory compliance

Risk management

Job description

HALA is seeking a senior information security leader to govern the company’s security program and lead the cyber security strategy in alignment with business goals. The role involves reporting to executive management and maintaining a strong security posture across all entities in the MENAP region.

The successful candidate will manage risk, oversee budgets, and coordinate audits and regulatory compliance with SAMA and CMA requirements, ensuring security controls are embedded in SDLC processes.