Senior Cybersecurity GRC Lead — Risk, Compliance & Governance

Confidential; Saudi Arabia; On-site; SAR 350,000 - 700,000; Full time

Job summary

Confidential in Saudi Arabia seeks a senior leader to drive the organization's cybersecurity governance, risk and compliance program, ensuring effective risk management and regulatory alignment across the enterprise.

The role requires a BS/MIS/CS, 8+ years of cybersecurity experience, and a track record of building mature security programs, policy lifecycle, audits, and reporting to executives.

Qualifications

• 8+ years of experience in cybersecurity function.
• Bachelor's degree in Computer Science, MIS or equivalent.
• Strong governance and risk management expertise.

Responsibilities

• Lead cybersecurity governance, risk and compliance activities to improve program maturity.
• Maintain the cybersecurity governance framework.
• Manage enterprise cybersecurity risk management program.
• Ensure regulatory compliance with applicable regs and standards.
• Oversee cybersecurity policy lifecycle management.
• Coordinate cybersecurity audits and regulatory assessments.
• Monitor remediation activities and compliance performance.
• Develop cybersecurity KPIs and executive reports.
• Manage third-party cybersecurity risk program.
• Promote cybersecurity awareness across the organization.
• Drive maturity improvement initiatives.
• Provide governance guidance to business and IT stakeholders.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Policy management

Audits

KPIs

Executive reporting

Third-party risk

Awareness training

Education

Bachelor's degree in Computer Science / MIS or equivalent

Job description

Confidential in Saudi Arabia seeks a senior leader to drive the organization's cybersecurity governance, risk and compliance program, ensuring effective risk management and regulatory alignment across the enterprise.

The role requires a BS/MIS/CS, 8+ years of cybersecurity experience, and a track record of building mature security programs, policy lifecycle, audits, and reporting to executives.