search Browse Jobs
Global Cybersecurity GRC ManagerFoodics · Eastern Province, Riyadh, Riyadh Province, Saudi Arabia
Foodics logo

Foodics

company page ↗

Global Cybersecurity GRC Manager

🗓️ Posted 2026-08-26 Eastern Province, Riyadh, Riyadh Province, Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 20,000–SAR 35,000/mo

About the Company

Equipping restaurateurs with intuitive tech to establish resilience, foster customer connections, and sustain growth. Foodics is the leading restaurant operations and payment tech in the MENA region, powering the operations of +30,000 restaurants with an all-in-one software ecosystem to manage and scale. We're on a mission to help restaurant operators bring their culinary visions to life with financial stability and personal satisfaction. We envision a future where every transaction in restaurants, from customers to suppliers, flows seamlessly through our platform, bringing operational efficiency, fostering customer connections, and enabling financial success. Join us on a mission to reimagine an industry where every F&B business can thrive. IT Services and IT Consulting Specialties: Restaurant Technology, Financial Management, Payment Processing, Accounting Systems, Restaurant Front of House Tech, Customer Engagement Solutions

Responsibilities

  • ● The Job in a Nutshell
  • ● What you will do
  • ● Manage and coordinate the group cybersecurity governance, risk, and compliance program under the direction of the CISO, including day-to-day GRC activities, priorities, operating cadence, and continuous improvement initiatives.
  • ● Conduct, coordinate, and track gap assessments against ISO 27001, SOC 2, NCA ECC, SAMA CSF, KSA PDPL, and other applicable cybersecurity, privacy, regulatory, and contractual requirements.
  • ● Translate regulatory and framework requirements into practical controls, implementation actions, accountable owners, target dates, and measurable evidence requirements.
  • ● Maintain the cybersecurity policy framework, including policies, standards, procedures, control owners, supporting evidence, review cycles, approved exceptions, and related governance records.
  • ● Own and maintain the cybersecurity risk register, facilitate risk assessments, and drive follow-up on treatment plans, risk acceptance, and overdue actions with business and technology owners.
  • ● Monitor control implementation and remediation progress, challenge weak or incomplete responses, and escalate material risks, recurring gaps, and overdue actions when necessary.
  • ● Coordinate internal audits, external audits, customer cybersecurity due diligence, certification activities, and readiness assessments, ensuring requests and evidence are handled consistently and efficiently.
  • ● Support Foodics cybersecurity compliance activities where required, including control mapping, evidence coordination, remediation tracking, audit support, and management reporting.
  • ● Prepare cybersecurity GRC dashboards, KPIs, KRIs, risk summaries, compliance status reports, and materials for management and cybersecurity governance committees.
  • ● Partner with control owners across Technology, Product, Operations, HR, Legal, Privacy, Procurement, and other functions to embed cybersecurity requirements into business processes and initiatives.
  • ● Maintain a clear compliance calendar and ensure recurring assessments, reviews, evidence collection, policy updates, risk reviews, and audit commitments are completed within agreed timelines.
  • ● Improve the efficiency and quality of the GRC program through standardized templates, control libraries, automation, tooling, and stronger evidence-management practices.
  • ● What Are We Looking For
  • ● + years of professional experience in cybersecurity governance, risk, compliance, audit, or a closely related field, with demonstrated experience managing enterprise GRC activities and working with senior cybersecurity leadership.
  • ● Strong hands-on knowledge of ISO 27001 and SOC 2, with practical experience conducting gap assessments, mapping controls, collecting evidence, and driving remediation to closure.
  • ● Good working knowledge of Saudi cybersecurity and privacy requirements, particularly NCA ECC and KSA PDPL, with the ability to interpret requirements and translate them into actionable controls.