Cybersecurity GRC Lead

Takamol Holding; Saudi Arabia; On-site; SAR 30,000 - 50,000; Full time

Job summary

A leading organization in cybersecurity seeks a GRC Cybersecurity expert to develop and implement a comprehensive Governance, Risk, and Compliance framework. The role requires an individual with over 5 years of experience in cybersecurity, particularly in GRC and risk management. Key responsibilities include establishing cybersecurity policies, leading audits, and managing third-party risks to drive compliance with international standards. This position demands strong leadership, communication skills, and ethical standards in handling sensitive information.

Qualifications

• 5+ years of experience in cybersecurity, with at least 2 years in GRC or risk management.
• Strong knowledge of risk management frameworks, security standards, and regulatory requirements.
• Experience leading audits, compliance programs, and third-party risk management.

Responsibilities

• Develop and maintain the GRC framework to ensure cybersecurity resilience and compliance.
• Establish cybersecurity policies and lead audits.
• Manage third-party risk and drive compliance with international standards.

Skills

Leadership

Communication

Analytical skills

Problem-solving

Strategic thinking

Education

Bachelor’s degree in Information Security, Computer Science, or Risk Management

Master’s degree (preferred)

Tools

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

Job Description

GRC Cybersecurity expert is responsible for developing, implementing, and maintaining the organization’s Governance, Risk, and Compliance (GRC) framework to ensure cybersecurity resilience, regulatory compliance, and effective risk management. The role involves establishing cybersecurity policies, leading audits, managing third-party risk, and driving compliance with international standards and regulations.

Job Requirements

Qualifications & Experience

• Bachelor’s degree in Information Security, Computer Science, Risk Management, or related field (Master’s preferred).
• 5+ years of experience in cybersecurity, with at least 2 years in a GRC or risk management.
• Professional certifications preferred: CISM, CRISC, GRCP, GRCA, ISO 27001 Lead Implementer/Auditor.
• Strong knowledge of risk management frameworks, security standards, and regulatory requirements.
• Experience leading audits, compliance programs, and third-party risk management.
• Excellent leadership, communication, and stakeholder management skills.

Key Competencies

• Strong analytical and problem-solving abilities.
• Strategic thinking with attention to detail.
• Ability to influence and drive change across diverse stakeholders.
• High ethical standards and integrity in handling sensitive information.