GRC Cybersecurity Lead - Policy, Audits & Risk Strategy

Takamol Holding; Saudi Arabia; On-site; SAR 30,000 - 50,000; Full time

Job summary

A leading organization in cybersecurity seeks a GRC Cybersecurity expert to develop and implement a comprehensive Governance, Risk, and Compliance framework. The role requires an individual with over 5 years of experience in cybersecurity, particularly in GRC and risk management. Key responsibilities include establishing cybersecurity policies, leading audits, and managing third-party risks to drive compliance with international standards. This position demands strong leadership, communication skills, and ethical standards in handling sensitive information.

Qualifications

• 5+ years of experience in cybersecurity, with at least 2 years in GRC or risk management.
• Strong knowledge of risk management frameworks, security standards, and regulatory requirements.
• Experience leading audits, compliance programs, and third-party risk management.

Responsibilities

• Develop and maintain the GRC framework to ensure cybersecurity resilience and compliance.
• Establish cybersecurity policies and lead audits.
• Manage third-party risk and drive compliance with international standards.

Skills

Leadership

Communication

Analytical skills

Problem-solving

Strategic thinking

Education

Bachelor’s degree in Information Security, Computer Science, or Risk Management

Master’s degree (preferred)

Tools

CISM

CRISC

ISO 27001 Lead Implementer/Auditor

Job description

A leading organization in cybersecurity seeks a GRC Cybersecurity expert to develop and implement a comprehensive Governance, Risk, and Compliance framework. The role requires an individual with over 5 years of experience in cybersecurity, particularly in GRC and risk management. Key responsibilities include establishing cybersecurity policies, leading audits, and managing third-party risks to drive compliance with international standards. This position demands strong leadership, communication skills, and ethical standards in handling sensitive information.