Global Cybersecurity GRC Manager

تعلن Foodics عن حاجتها إلى Global Cybersecurity GRC Manager.

Required:

10+ years of professional experience in cybersecurity governance, risk, compliance, audit, or a closely related field, with demonstrated experience managing enterprise GRC activities and working with senior cybersecurity leadership.

Strong hands-on knowledge of ISO 27001 and SOC 2, with practical experience conducting gap assessments, mapping controls, collecting evidence, and driving remediation to closure.

Good working knowledge of Saudi cybersecurity and privacy requirements, particularly NCA ECC and KSA PDPL.

Demonstrated experience owning or managing cybersecurity risk registers, risk assessments, treatment plans, risk acceptance, exceptions, and management escalation.

Experience maintaining cybersecurity policies, standards, procedures, control libraries, control ownership, evidence repositories, and compliance documentation.

Proven ability to coordinate internal and external audits, manage evidence requests, respond to customer security assessments, and support certification or assurance readiness.

Strong analytical skills and ability to turn complex risk and compliance information into clear dashboards, executive summaries, and committee reporting.

Stakeholder management skills.

Strong written and verbal communication in English.

Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, or a related discipline, or equivalent relevant professional experience.

Nice to have:

Experience in FinTech, payments, SaaS, or another regulated environment.

Experience with SAMA cybersecurity requirements.

Certifications such as ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISA, CISSP.

Experience with PCI DSS, third-party cybersecurity risk management, privacy compliance.

Hands-on experience with GRC platforms, evidence automation, compliance tooling.

Experience across multiple business entities, countries, or regulatory environments.

Arabic language skills.

Duties:

Manage and coordinate the group cybersecurity governance, risk, and compliance program under the direction of the CISO.

Conduct, coordinate, and track gap assessments against ISO 27001, SOC 2, NCA ECC, SAMA CSF, KSA PDPL and other requirements.

Translate regulatory and framework requirements into practical controls, actions, owners, and target dates.

Maintain the cybersecurity policy framework.

Own and maintain the cybersecurity risk register and drive follow-up on treatment plans.

Monitor control implementation and remediation progress and escalate material risks.

Coordinate internal and external audits, customer due diligence, and certification activities.

Support Foodics Pay cybersecurity compliance activities.

Prepare GRC dashboards, KPIs, KRIs, and compliance reports.

Partner with control owners across functions.

Maintain a compliance calendar.

Improve GRC program efficiency through templates, control libraries, automation, and tooling.