Cipher | سايڤر

Cybersecurity GRC Manager | On-site | 6-Month Contract

Riyadh, Saudi ArabiaPosted 3 days ago

Salary
AED 8k–12k a month· est.
Job type
Contract
Level
Lead
Field
Engineering & Technology
Work mode
On site

About the role

Key Responsibilities • Design and maintain cybersecurity governance frameworks, policies, and standards. • Manage and perform periodic cybersecurity risk assessments and recommend mitigation plans. • Coordinate and oversee compliance with NCA Frameworks and ISO 27001 requirements. • Supervise the tracking and closure of identified risks, exceptions, and remediation plans. • Support internal and external cybersecurity audits and ensure timely evidence collection. • Oversee third-party cybersecurity risk assessments and supplier due diligence processes. • Monitor cybersecurity awareness initiatives and ensure effective implementation. • Provide regular reporting on cybersecurity posture, compliance status, and key risk indicators. • Mentor and guide junior GRC staff to enhance internal capability and consistency. • Act as the focal point between cybersecurity, legal, and business units to ensure coordinated risk management. Required Qualifications • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field. • Minimum of 5 years of experience in cybersecurity GRC or an equivalent domain. • Professional certifications such as CISM, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor. • Strong knowledge of NCA Frameworks, ISO 27001/02, and other relevant frameworks. • Analytical and risk-oriented mindset with strong communication and stakeholder management skills. • Proven ability to translate regulatory and policy requirements into actionable controls. • Full-time on-site attendance at the company's premises is mandatory. Work Location: On-site at the designated workplace.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field. Minimum of 5 years of experience in cybersecurity GRC or an equivalent domain. Professional certifications such as CISM, CISA, CISSP, or ISO 27001 Lead Implementer/Auditor. Strong knowledge of NCA Frameworks, ISO 27001/02, and other relevant frameworks. Analytical and risk-oriented mindset with strong communication and stakeholder management skills. Proven ability to translate regulatory and policy requirements into actionable controls. Full-time on-site attendance at the company's premises is mandatory.

Responsibilities

Design and maintain cybersecurity governance frameworks, policies, and standards. Manage and perform periodic cybersecurity risk assessments and recommend mitigation plans. Coordinate and oversee compliance with NCA Frameworks and ISO 27001 requirements. Supervise the tracking and closure of identified risks, exceptions, and remediation plans. Support internal and external cybersecurity audits and ensure timely evidence collection. Oversee third-party cybersecurity risk assessments and supplier due diligence processes. Monitor cybersecurity awareness initiatives and ensure effective implementation. Provide regular reporting on cybersecurity posture, compliance status, and key risk indicators. Mentor and guide junior GRC staff to enhance internal capability and consistency. Act as the focal point between cybersecurity, legal, and business units to ensure coordinated risk management.

Skills

  • NCA Frameworks
  • ISO 27001
  • ISO 27002
  • GRC
  • risk assessment
  • cybersecurity governance
  • auditing
  • stakeholder management
  • policy development
  • controls implementation

Not sure you fit this role?

Upload your CV and see how you score against Cipher | سايڤر and every other live job. It's free.

Get my free matches
Cyber Security jobs in Riyadh83 live roles, top employers and pay.See all →

Similar jobs in Saudi Arabia