Procurement jobs in Saudi Arabia
Manager -Cybersecurity GRC-Saudi National
Al Jomaih Energy and Water
Manager -Cybersecurity GRC-Saudi National
Al Jomaih Energy and Water
IT Governance Officer
Compunet Connections
Management Accountant - Jeddah
Top Notch Consultancy
Discover more opportunities than anywhere else. Find more jobs nowInterior Design Engineer
BinDawood Holding
Chief Financial Officer (CFO) (Electricity and Cable Manufacturing)
SSC HR Solutions
Site Engineer (Electrical / Mechanical Engineer)
-
Connect with headhunters to apply for similar jobsConstruction Manager
HanmiGlobal Saudi
Chief Financial Officer (SATS Saudi Arabia)
SATS Ltd.
Territory Manager Joints - Johnson & Johnson MedTech | Orthopaedics | Eastern Province
Johnson & Johnson MedTech
Chief Financial Officer (CFO) (Electricity and Cable Manufacturing)
SSC HR Solutions
Project Manager - Madinah
AlRajhi United
Procurement & Cash Operations Specialist
Samaya Investment Company
Administrative Specialist - Office Ops & Vendor Support
Saudi Petroleum Services Polytechnic
Corporate Jobs in Al-Malaz (Dec 2025) - Bayt.com
Saudi Petroleum Services Polytechnic
Chief Financial Officer (CFO) (Electricity and Cable Manufacturing)
SSC HR Solutions
Purchaser/Buyer
Helmerich & Payne
Chief Financial Officer (CFO) (Electricity and Cable Manufacturing)
SSC
TPE VI / Consultant Piping Engineer
-
Cost Controller - Luxury Hotel (Pre-Opening)
SLS The Red Sea
Project Manager
TGS International Group
Manager -Cybersecurity GRC-Saudi National
Job summary
A leading energy and water services company in Saudi Arabia is seeking a Cybersecurity GRC Manager to oversee governance, risk, and compliance programs. In this role, you will maintain cybersecurity policies, conduct assessments, and manage third-party and cloud computing risks. Ideal candidates have 3-7 years in GRC, strong Arabic and English skills, and experience with NCA frameworks. Regular travel within Saudi Arabia and occasionally to other countries is required.
Qualifications
- 3–7 years in cybersecurity GRC or audit.
- Proven work with NCA frameworks.
- Strong skills in policy writing, audit, and risk facilitation.
Responsibilities
- Maintain cybersecurity policy/standard/procedure library.
- Plan and run internal assessments.
- Maintain the cyber risk register.
- Ensure enforcement of third-party cybersecurity controls.
Skills
Education
Tools
Overview The cybersecurity GRC manager helps run the governance, risk, and compliance program across AEW and AEW‑served companies. The role is expected to drive policy lifecycle, assessments, audits, exceptions, third‑party risk, and regulatory alignment. Role is expected to coordinate remediation with AEW Digital Services/IT and counterparts at serviced entities.
- Governance & Policy: Maintain AEW’s cybersecurity policy/standard/procedure library; run annual review cycle; map to ECC‑2:2024 and other applicable NCA controls (OTCC/CSCC/OSMACC) and relevant international baselines (e.g., ISO 27001).
- Publish and track mandatory control exceptions with end dates and risk acceptance.
- Compliance & Assurance: Plan and run internal assessments for AEW and serviced entities; prepare for external inspections; maintain evidence library.
- Use the NCA ECC‑2 Assessment & Compliance Tool when applicable; produce gap analyses and remediation plans.
- Risk Management: Maintain the cyber risk register; facilitate business‑owned risk decisions; integrate with enterprise risk.
- Run control design/effectiveness reviews ahead of audits.
- Third‑Party & Cloud: Ensure enforcement of third‑party cybersecurity controls in line with ECC‑2:2024 “third‑party and cloud computing” domain.
- Coordinate with Procurement and Legal.
- Awareness & Training: Define compliance‑focused awareness training plan and track completion.
- Reporting & Governance: Provide monthly KPI packs to the Head of Digital Services and Cybersecurity Steering Committee.
- Bachelor’s degree.
- 3–7 years in cybersecurity GRC or audit.
- Proven work with NCA frameworks (ECC‑2:2024; plus OTCC/CSCC/OSMACC as applicable to entity scope).
- Strong policy writing, audit, and risk facilitation skills; Arabic and English business proficiency.
- Preferred: ISO/IEC 27001 LA/LI, CISM, CRISC (or equivalent).
Regular travel within Saudi Arabia and other relevant countries as required by the business.
* The salary benchmark is based on the target salaries of market leaders in their relevant sectors. It is intended to serve as a guide to help Premium Members assess open positions and to help in salary negotiations. The salary benchmark is not provided directly by the company, which could be significantly higher or lower.