Senior Global Cybersecurity GRC Leader

Foodics; Riyadh; On-site; SAR 420,000 - 780,000; Full time

Benefits offered by this job

Bonuses

Equity/Share options

Learning stipend

Training opportunities

Job summary

Foodics is seeking a Global Cybersecurity GRC Manager to lead governance, risk, and compliance across the Foodics Group under the CISO. Translate regulatory requirements into practical controls, ownership, remediation plans, and reporting.

This high-visibility role collaborates with Cybersecurity, Technology, Product, Legal, Privacy, Internal Audit, and business teams; prepare dashboards, manage risk registers, and drive evidence-based improvements in our GRC program.

Qualifications

• 10+ years of professional experience in cybersecurity governance, risk, compliance, audit, or closely related field.
• Strong hands-on knowledge of ISO 27001 and SOC 2 with experience mapping controls and driving remediation.
• Good working knowledge of Saudi cybersecurity/privacy requirements (NCA ECC, KSA PDPL).
• Experience owning/managing cybersecurity risk registers, risk assessments, and treatment plans.
• Experience maintaining cybersecurity policies, standards, procedures, and evidence repositories.
• Ability to coordinate internal/external audits and support customer security assessments.
• Strong analytical skills to create dashboards, executive summaries, and management reporting.
• Stakeholder management to drive accountability and follow-through.

Responsibilities

• Manage and coordinate group GRC efforts under the CISO for day-to-day activities and improvements.
• Conduct, coordinate, and track gap assessments against ISO 27001, SOC 2, NCA ECC, SAMA CSF, KSA PDPL, etc.
• Translate regulatory requirements into practical controls with owners and target dates.
• Maintain cybersecurity policy framework, standards, and evidence records.
• Own and maintain the cybersecurity risk register and remediation plans.
• Monitor control implementation and escalate material risks and overdue actions.
• Coordinate internal and external audits and readiness activities.
• Prepare GRC dashboards, KPIs, KRIs, and management reports.
• Collaborate with cross-functional teams to embed cybersecurity requirements.

Skills

GRC management

Stakeholder management

Policy writing

Executive reporting

Risk assessment

Audits coordination

English communication

Cross-functional collaboration

Education

Bachelor’s degree in Cybersecurity/Information Security/Information Technology/Risk Management

Tools

ISO 27001

SOC 2

NCA ECC

KSA PDPL

GRC platforms

Evidence management

Job description

Foodics is seeking a Global Cybersecurity GRC Manager to lead governance, risk, and compliance across the Foodics Group under the CISO. Translate regulatory requirements into practical controls, ownership, remediation plans, and reporting.

This high-visibility role collaborates with Cybersecurity, Technology, Product, Legal, Privacy, Internal Audit, and business teams; prepare dashboards, manage risk registers, and drive evidence-based improvements in our GRC program.