Cybersecurity GRC ManagerGlobal Corporation · Riyadh, Saudi Arabia

Cybersecurity GRC Manager

🗓️ Posted 2026-08-28 Riyadh, Saudi Arabia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market SAR 25,000–SAR 45,000/mo

About the Company

We are Foodics A leading restaurant management ecosystem and payment tech provider. Founded in 2014 with headquarters in Riyadh and offices across five countries, including UAE, Egypt, Jordan, and Kuwait. We are currently serving customers and partners in over 35 different countries worldwide. Our innovative products have successfully processed over 6 billion (yes, billion with a B) orders so far, making Foodics one of the most rapidly evolving SaaS companies to ever emerge from the MENA region. Also, Foodics has achieved three rounds of funding, with the latest raising 170 million in the largest SaaS funding round in MENA, boosting its innovation capabilities to better serve business owners. The job in a nutshell We are looking for a Global Cybersecurity GRC Manager to manage and coordinate cybersecurity governance, risk, and compliance activities across the Foodics Group under the direction of the CISO. You will be responsible for the day-to-day operation of the GRC program translating cybersecurity frameworks, regulatory obligations, and business risks into practical controls, clear ownership, measurable remediation plans, and decision-ready reporting. This is a high-visibility, cross-functional role working closely with Cybersecurity, Technology, Product, Legal, Privacy, Internal Audit, and business teams across the group, while supporting Foodics Pay cybersecurity compliance activities where required. What you will do Manage and coordinate the group cybersecurity g

Requirements

  • ● braries, control ownership, evidence repositories, and compliance documentation.
  • ● Proven ability to coordinate internal and external audits, manage evidence requests, respond to customer security assessments, and support certification or assurance readiness.
  • ● Strong analytical skills and the ability to turn complex risk and compliance information into clear dashboards, executive summaries, and decision-ready committee reporting.
  • ● Stakeholder management skills, with the confidence to challenge control owners constructively, drive accountability, and follow actions through to completion.
  • ● Strong written and verbal communication in English, including the ability to write clear policies, risk statements, assessment findings, remediation actions, and management reports.
  • ● Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, or a related discipline, or equivalent relevant professional experience.
  • ● Nice to have
  • ● Professional certifications such as ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISA, CISSP, or equivalent.
  • ● Hands-on experience with GRC platforms, evidence automation, compliance tooling, or building structured control and risk reporting workflows.
  • ● Arabic language skills for engaging with stakeholders, regulators, and documentation.