Experienced Cybersecurity GRC Manager for an onsite secondment role in Riyadh, KSA

Overview

• **Client >**

Large Enterprise, Saudi Arabia

• **Context >**
• For a project with a Partner in KSA we are seeking to onboard an experienced Cybersecurity GRC Manager for a role in Riyadh,
• ***Technology Industry***
• **Tasks / Responsibilities >**
• Provide co-sourced operational support to run the client’s cybersecurity function, including execution of agreed processes and coordination with stakeholders; Support the establishment and maintenance of the cybersecurity operating model, roles, and responsibilities; Run governance and reporting rhythms, including operational meetings, management reporting, and cybersecurity committee updates; Ensure ongoing compliance with NCA ECC/CCC, PDPL, ISO 27001, and other applicable regulations; Maintain and update the NCA ECC/CCC control mapping matrix and track compliance status; Support cyber risk management activities, including maintaining risk registers and monitoring mitigation actions; Monitor regulatory updates (NCA, SDAIA, CST, NDMO) and perform impact assessments, recommending updates to policies, processes, and roadmap; Maintain regulatory-ready evidence repositories to support audits, inspections, and client inquiries; Support internal and external audits, including NCA, SDAIA, and CST inspections; Coordinate responses to client cybersecurity inquiries and assurance requests; Maintain incident response readiness and support incident handling activities; Ensure proper documentation of incidents, lessons learned, and improvement actions; Support the execution and periodic update of the cybersecurity roadmap.Track performance against KPIs, SLAs, and cybersecurity objectives.
• **Requisites >**

1)

5)

6)

• ***Stakeholder Management in Saudi Context***
• **Workload/Location**

> Full-time Riyadh (Saudi Arabia)

• **Start-date**
• > Immediate need, 12 months
• **Rate >**
• able to attract more qualified candidates