Cybersecurity GRC Manager

Total-TECH Co; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading company in Saudi Arabia is seeking a Cybersecurity GRC Manager to implement governance, risk, and compliance programs. The role requires collaboration with government stakeholders and technical teams to enhance cybersecurity posture and ensure compliance with regulatory standards. This position is ideal for a candidate with extensive experience in handling cybersecurity operations and proven success in high-regulation environments.

Qualifications

• 7+ years of experience in Cybersecurity, including GRC and Network/Security Operations.
• Experience working with government entities or high-regulation sectors.
• Certified in CISSP and CISA.

Responsibilities

• Lead/support cybersecurity governance, risk, and compliance programs.
• Conduct risk assessments and security audits aligned with standards.
• Develop and maintain security policies and compliance documentation.

Skills

Cybersecurity frameworks

Risk management methodologies

Vulnerability management

Compliance management

Documentation skills

Tools

Firewalls

IDS/IPS

Endpoint security

Job description

• Lead or support the implementation of cybersecurity governance, risk, and compliance programs.
• Conduct risk assessments, gap analyses, and security audits aligned with national and international standards (e.g., NCA ECC, ISO 27001, NIST).
• Develop and maintain security policies, procedures, and documentation in accordance with compliance requirements.
• Ensure compliance with government cybersecurity regulations and provide audit support.
• Act as a trusted advisor to government stakeholders on all matters related to GRC and cybersecurity.
• Collaborate with technical teams to ensure secure network and system configurations.
• Provide hands-on support in network and security technologies during audits or incident reviews.
• Monitor and report on compliance posture and control effectiveness.
• Engage in continuous improvement of GRC frameworks and tools.
  Requirements:
  
• 7+ years of experience in Cybersecurity, including GRC and Network/Security Operations.
• Proven experience working with government entities or high-regulation sectors.
• Strong knowledge of:
  1 Cybersecurity frameworks (e.g., NIST, ISO 27001, NCA ECC).
  2 Risk management methodologies.
  3 Vulnerability and compliance management tools.
• Hands-on experience in network and security technologies (firewalls, IDS/IPS, endpoint security, etc.).
• Strong documentation, policy writing, and reporting skills.
• Fluent in English (Arabic is a plus).
  Certifications (Required):
  1. CISSP Certified Information Systems Security Professional.
  2. CISA Certified Information Systems Auditor.

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]

People Looking for Cybersecurity GRC Manager Jobs also searched