Cybersecurity Governance Officer

Arab Solutions; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading tech company is seeking a Cybersecurity Governance Officer in Riyadh. The role requires the development and maintenance of a cybersecurity governance framework and assurance of compliance with ECC-2024 and national requirements. Candidates should have a Bachelor’s in Information Security or related field, with over 5 years of experience and fluency in Arabic and English. Key skills include GRC expertise and regulatory compliance. This is a senior specialist position requiring strong stakeholder management and strategic planning abilities.

Qualifications

• Minimum of 5 years experience in cybersecurity governance or GRC.
• Fluency in both Arabic and English is required.
• Strong knowledge of ECC-2024, ISO 27001, NIST frameworks.

Responsibilities

• Develop and maintain cybersecurity governance framework.
• Ensure compliance with ECC-2024 controls and National Cybersecurity Authority requirements.
• Coordinate with committees and senior management on cybersecurity decisions.
• Oversee policy development and implementation.
• Manage relationships with regulatory bodies.
• Lead cybersecurity awareness programs.

Skills

Governance, Risk, and Compliance (GRC) expertise

Policy development and management

Regulatory compliance

Stakeholder management

Strategic planning

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

CRISC

CGEIT

ISO 27001 Lead Implementer

Job description

Overview

Job Title: Cybersecurity Governance Officer (Saudi Nationals only)

Position Level: Senior Specialist

Key Responsibilities

• Develop and maintain cybersecurity governance framework
• Ensure compliance with ECC-2024 controls and National Cybersecurity Authority requirements
• Coordinate with committees and senior management on cybersecurity decisions
• Oversee policy development and implementation
• Manage relationships with regulatory bodies
• Lead cybersecurity awareness programs

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field
• 5+ years experience in cybersecurity governance or GRC
• Certifications: CRISC, CGEIT, ISO 27001 Lead Implementer, or equivalent
• Strong knowledge of ECC-2024, ISO 27001, NIST frameworks
• Fluency in Arabic and English

Key Skills

• Governance, Risk, and Compliance (GRC) expertise
• Policy development and management
• Regulatory compliance
• Stakeholder management
• Strategic planning

Skills: strategic planning, CRISC, ISO 27001, ECC-2024, stakeholder management, cybersecurity awareness, GRC, NIST frameworks, CGEIT