Cybersecurity GRC Team Leader

We are looking for an experienced Cybersecurity GRC Team Leader to lead cybersecurity governance, risk, and compliance activities and strengthen the organization’s cybersecurity control environment. Key Responsibilities: • Develop and maintain cybersecurity policies, procedures, standards, and controls. • Lead cybersecurity risk assessments and maintain the cybersecurity risk register. • Ensure compliance with NCA ECC, ISO/IEC 27001, COBIT, and NIST CSF. • Monitor cybersecurity KPIs, KRIs, compliance gaps, and risk remediation plans. • Oversee security assessments, vulnerability management, penetration testing, and incident follow-up. • Review access privileges, audit logs, segregation of duties, and least-privilege controls. • Assess cybersecurity risks related to vendors and third parties. • Prepare cybersecurity reports and recommendations for senior management. • Lead cybersecurity awareness initiatives and promote a strong security culture. Requirements: • Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Computer Engineering, or a related field. • Minimum 10 years of experience in Cybersecurity or Information Security. • Strong experience in cybersecurity GRC, risk assessment, compliance, access reviews, and control monitoring. • Strong knowledge of Saudi cybersecurity regulatory requirements. • Professional certifications such as CISSP, CISM, CRISC, CGRC, Security+, or ISO 27001 Lead Auditor/Lead Implementer are preferred. • Strong leadership, analytical, reporting, and stakeholder management skills.

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Computer Engineering, or a related field. Minimum 10 years of experience in Cybersecurity or Information Security. Strong experience in cybersecurity GRC, risk assessment, compliance, access reviews, and control monitoring. Strong knowledge of Saudi cybersecurity regulatory requirements. Professional certifications such as CISSP, CISM, CRISC, CGRC, Security+, or ISO 27001 Lead Auditor/Lead Implementer are preferred. Strong leadership, analytical, reporting, and stakeholder management skills.

Develop and maintain cybersecurity policies, procedures, standards, and controls. Lead cybersecurity risk assessments and maintain the cybersecurity risk register. Ensure compliance with NCA ECC, ISO/IEC 27001, COBIT, and NIST CSF. Monitor cybersecurity KPIs, KRIs, compliance gaps, and risk remediation plans. Oversee security assessments, vulnerability management, penetration testing, and incident follow-up. Review access privileges, audit logs, segregation of duties, and least-privilege controls. Assess cybersecurity risks related to vendors and third parties. Prepare cybersecurity reports and recommendations for senior management. Lead cybersecurity awareness initiatives and promote a strong security culture.