Cybersecurity GRC Team Leader

Confidentiel; Riyadh; Sur place; SAR 400 000 - 660 000; Plein temps

Résumé du poste

Confidentiel in Saudi Arabia seeks an experienced Cybersecurity GRC Team Leader to drive governance, risk and compliance programs and strengthen the organization’s cyber control environment.

You will develop and maintain policies, lead risk assessments, monitor KPIs and remediation plans, review access controls, and ensure adherence to Saudi regulatory requirements and global standards. The role requires strong leadership, analytics and reporting skills.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Computer Engineering, or a related field.
• Minimum 10 years of experience in Cybersecurity or Information Security.
• Strong experience in cybersecurity GRC, risk assessment, compliance, access reviews, and control monitoring.
• Strong knowledge of Saudi cybersecurity regulatory requirements.
• Professional certifications such as CISSP, CISM, CRISC, CGRC, Security+, or ISO 27001 Lead Auditor/Lead Implementer are preferred.

Responsabilités

• Develop and maintain cybersecurity policies, procedures, standards, and controls.
• Lead cybersecurity risk assessments and maintain the cybersecurity risk register.
• Ensure compliance with NCA ECC, ISO/IEC 27001, COBIT, and NIST CSF.
• Monitor cybersecurity KPIs, KRIs, compliance gaps, and risk remediation plans.
• Oversee security assessments, vulnerability management, penetration testing, and incident follow-up.
• Review access privileges, audit logs, segregation of duties, and least-privilege controls.
• Assess cybersecurity risks related to vendors and third parties.
• Prepare cybersecurity reports and recommendations for senior management.
• Lead cybersecurity awareness initiatives and promote a strong security culture.

Connaissances

Leadership

Analytical skills

Reporting

Stakeholder management

GRC

Formation

Bachelor's degree in Cybersecurity or related field

Outils

NCA ECC

ISO/IEC 27001

COBIT

NIST CSF

Description du poste

We are looking for an experienced Cybersecurity GRC Team Leader to lead cybersecurity governance, risk, and compliance activities and strengthen the organization’s cybersecurity control environment.

Key Responsibilities:

• Develop and maintain cybersecurity policies, procedures, standards, and controls.
• Lead cybersecurity risk assessments and maintain the cybersecurity risk register.
• Ensure compliance with NCA ECC, ISO/IEC 27001, COBIT, and NIST CSF.
• Monitor cybersecurity KPIs, KRIs, compliance gaps, and risk remediation plans.
• Oversee security assessments, vulnerability management, penetration testing, and incident follow-up.
• Review access privileges, audit logs, segregation of duties, and least-privilege controls.
• Assess cybersecurity risks related to vendors and third parties.
• Prepare cybersecurity reports and recommendations for senior management.
• Lead cybersecurity awareness initiatives and promote a strong security culture.

Requirements:

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Computer Engineering, or a related field.
• Minimum 10 years of experience in Cybersecurity or Information Security.
• Strong experience in cybersecurity GRC, risk assessment, compliance, access reviews, and control monitoring.
• Strong knowledge of Saudi cybersecurity regulatory requirements.
• Professional certifications such as CISSP, CISM, CRISC, CGRC, Security+, or ISO 27001 Lead Auditor/Lead Implementer are preferred.
• Strong leadership, analytical, reporting, and stakeholder management skills.