Cybersecurity GRC Manager

Responsibilities

• ● Develop, implement, and continuously improve the Cyber Security Governance framework, policies, standards, and procedures.
• ● Lead the creation and execution of the Cyber Security Strategy, aligning it with overall business goals.
• ● Provide regular reports to the CISO and executive management on the state of cybersecurity.
• ● Establish and manage a security metrics and Key Performance Indicator (KPI) program to measure program effectiveness.
• ● Design and manage a comprehensive enterprise-wide Cyber Security Risk Management program.
• ● Conduct regular risk assessments, including Business Impact Analysis (BIA), to identify, analyze, and evaluate information security risks.
• ● Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation strategies.
• ● Manage the vendor risk management program, assessing the security posture of third-party vendors, especially cloud service providers and payment gateways.
• ● Integrate risk management into the Software Development Life Cycle (SDLC) and change management processes.
• ● Ensure continuous compliance with SAMA's Cyber Security Framework (CSF), Insurance Authority, NCA requirements, and other relevant regulations.
• ● Manage the process for obtaining and maintaining necessary regulatory licenses and certifications from a cybersecurity perspective.
• ● Prepare and submit accurate and timely regulatory reports, questionnaires, and evidence requests.