General Opening – Cybersecurity GRC

NADEC Foods; Riyadh; On-site; SAR 250,000 - 420,000; Full time

Job summary

NADEC Foods is seeking cybersecurity professionals to join our Governance, Risk and Compliance (GRC) function. Successful candidates will strengthen governance, manage cybersecurity risks, ensure regulatory compliance, and continuously improve controls, policies, processes, and reporting.

The scope and level of responsibility will align with qualifications and experience, with opportunities to lead GRC initiatives and collaborate across Cybersecurity, IT, risk, compliance, internal audit,

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, Engineering, or a related discipline.
• Relevant experience in Cybersecurity GRC, cybersecurity technologies, operations, risk management, compliance, or control assurance.
• Working knowledge of cybersecurity risk assessments, governance, compliance monitoring, policy management, audit support, and reporting.

Responsibilities

• Support or lead the implementation and maintenance of the cybersecurity governance framework, including clear roles, responsibilities, oversight mechanisms, and management reporting.
• Identify, assess, monitor, treat, and elevate cybersecurity risks using practical risk analysis and scoring approaches.
• Monitor compliance with applicable National Cybersecurity Authority requirements, regulatory obligations, internal policies, and recognized frameworks.
• Develop, review, and maintain cybersecurity policies, standards, procedures, control documentation, records, and supporting evidence.
• Support cybersecurity audits, assessments, regulatory-readiness activities, remediation plans, and closure of findings or control gaps.
• Prepare reports and presentations on cybersecurity posture, risks, compliance status, and improvement priorities.
• Collaborate with Cybersecurity, IT, business, risk, compliance, internal audit, consultants, and service providers to achieve effective GRC outcomes.
• Promote secure practices, accountability, continuous improvement, and effective stakeholder communication across the organization.
• Depending on seniority, coordinate GRC initiatives, resources, vendors, project risks, and team deliverables.

Skills

GRC governance

Cybersecurity risk management

Regulatory compliance

Policy management

Stakeholder communication

Audit support

Reporting

Analytical skills

Collaboration

Education

CISSP

CISM

CISA

ISO/IEC 27001 Lead Implementer

NIST CSF Practitioner

Tools

ISO/IEC 27001

NIST CSF

Job description

We are seeking cybersecurity professionals to join our Governance, Risk and Compliance (GRC) function.

Successful candidates will contribute to the organization's cybersecurity objectives by strengthening governance, managing cybersecurity risks, maintaining regulatory compliance, and continuously improving controls, policies, processes, and reporting. The scope and level of responsibility will be aligned with the candidate's qualifications and experience.

Key Responsibilities

• Support or lead the implementation and maintenance of the cybersecurity governance framework, including clear roles, responsibilities, oversight mechanisms, and management reporting.
• Identify, assess, monitor, treat, and elevate cybersecurity risks using practical risk analysis and scoring approaches.
• Monitor compliance with applicable National Cybersecurity Authority requirements, regulatory obligations, internal policies, and recognized frameworks.
• Develop, review, and maintain cybersecurity policies, standards, procedures, control documentation, records, and supporting evidence.
• Support cybersecurity audits, assessments, regulatory-readiness activities, remediation plans, and closure of findings or control gaps.
• Prepare reports and presentations on cybersecurity posture, risks, compliance status, and improvement priorities.
• Collaborate with Cybersecurity, IT, business, risk, compliance, internal audit, consultants, and service providers to achieve effective GRC outcomes.
• Promote secure practices, accountability, continuous improvement, and effective stakeholder communication across the organization.
• Depending on seniority, coordinate GRC initiatives, resources, vendors, project risks, and team deliverables.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, Engineering, or a related discipline.
• Relevant experience in Cybersecurity GRC, cybersecurity technologies, operations, risk management, compliance, or control assurance. Candidates from entry level through experienced lead level may be considered.
• Working knowledge of cybersecurity risk assessments, governance, compliance monitoring, policy management, audit support, and reporting.
• Knowledge of NCA frameworks and controls, including ECC, DCC, OTCC, and CCC, is highly valued; familiarity with ISO/IEC 27001 and the NIST Cybersecurity Framework is an advantage.
• Professional certifications such as CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer or Lead Auditor, CCSP, CEH, OSCP, GICSP, ISA/IEC 62443, PMP, ITIL, or equivalent are preferred or may be required depending on the role level.
• Strong communication, documentation, analytical, collaboration, and stakeholder-management skills.
• Professional proficiency in Arabic and English is an advantage, particularly for reporting and stakeholder communication.