Cybersecurity Governance, Risk and Compliance Manager

Riyadh Air; Riyadh; On-site; SAR 90,000 - 150,000; Full time

Job summary

An innovative airline is seeking a Cybersecurity GRC professional to join its mission of transforming air travel. In this pivotal role, you will safeguard critical data and assets while ensuring compliance with regulatory standards. Your expertise will help shape the future of aviation, making a significant impact in a dynamic environment. If you possess strong communication skills and a deep understanding of cybersecurity governance, this is your chance to drive excellence in a forward-thinking organization. Join us in leading the aviation industry into a new era of digital transformation.

Qualifications

• Minimum 6 years of experience in Cybersecurity GRC roles.
• In-depth understanding of regulatory compliance requirements.

Responsibilities

• Safeguard assets, data, and reputation through effective governance.
• Develop and maintain cybersecurity policies and training programs.

Skills

Cybersecurity GRC

Communication Skills

Teamwork Skills

Regulatory Compliance

Risk Management

Education

Degree in relevant field

Tools

eGRC tools

Job description

About the Company

Riyadh Air (RX), headquartered in the Saudi Capital, is the new national airline that’s shaping the future of flying. It seeks to lead the aviation industry by transforming Saudi Arabia into a global aviation and trade hub – a digitally native airline that will connect the kingdom to more than 100 destinations.

About the Role

Are you a driven Cybersecurity GRC professional with excellent communication and teamwork skills? This is a role where you will be responsible for safeguarding our assets, data, and reputation through establishing effective governance, managing cybersecurity risks, and ensuring compliance with regulatory requirements and standards such as NCA and ISO 27001. Yours is a role to advise IT and Business teams to ensure information security practices align with regulatory requirements, industry standards, and internal policies. Central to this role is to develop and maintain cybersecurity policies, standards, and baselines; as well as develop an Information Security Awareness and Training program for all users.

Further, you will develop and maintain a comprehensive Risk Management Framework that sets the tone for assessments, threat management, and audits. You will implement the GRC strategy, ensuring robust risk management and compliance. This role is your opportunity to drive cybersecurity trust, resilience, and regulatory excellence in a dynamic and ever-evolving organization.

About You

Degree qualified, you will possess a minimum of 6 years of experience in Cybersecurity GRC roles within large complex organizations handling critical data and assets. You are expected to demonstrate an in-depth understanding of regulatory compliance requirements and designing the associated policies and procedures (NCA, ISO 27001, NIST, PCI DSS, GDPR, etc.). You will also have experience in using eGRC tools for carrying out risk management and audit functions. We’d love to hear from you even more if you have relevant cybersecurity certifications such as GIAC GCCC, CISA, CISM, ISO 27001 LA, or equivalent. This is your opportunity to shape the future of air travel. Bring your best and show us why you can own this position within Riyadh Air. Please submit your application by clicking on the Apply button. Our Talent Acquisition team will be reviewing applications shortly.