Job summary
Foodics is hiring a Global Cybersecurity GRC Manager in Riyadh to run the group’s cybersecurity governance, risk and compliance program. The role oversees gap assessments, risk registers, policy frameworks and audit readiness across the business.
Key responsibilities
- Manage and coordinate the group cybersecurity GRC program under CISO direction.
- Conduct and track gap assessments against ISO 27001, SOC 2 and regional regulations.
- Translate requirements into controls, owners, dates, and evidence needs.
- Maintain policy framework, control libraries, and governance records.
- Own the cybersecurity risk register and drive treatment and acceptance actions.
- Coordinate internal/external audits and customer security due diligence.
- Prepare GRC dashboards, KPIs, risk summaries and committee reports.
- Embed cybersecurity requirements across business functions and processes.
Requirements
- 10+ years in cybersecurity GRC, risk, compliance, audit or related field.
- Hands-on experience with ISO 27001 and SOC 2 gap assessments.
- Working knowledge of NCA ECC and KSA PDPL requirements.
- Experience owning risk registers, assessments and treatment plans.
- Experience maintaining policies, control libraries and evidence.
- Proven audit coordination and customer assessment support experience.
- Strong analytical skills and clear executive reporting in English.
- Bachelor’s degree in relevant field or equivalent experience.
Benefits
- Competitive compensation and bonuses
- Potential equity/shares
- Regular training and development
- Annual learning stipend
Skills
GRCISO 27001SOC 2Risk managementAudit coordinationCompliance reportingStakeholder managementEnglish communicationGRC toolingEvidence collection
Source: Workable. Last checked as open: 14 Nov 2026. You apply directly with the employer.
Apply now
