Global Cybersecurity GRC Manager

• →10+ years of professional experience in cybersecurity governance, risk, compliance, audit, or a closely related field, with demonstrated experience managing enterprise GRC activities and working with senior cybersecurity leadership.
• →Strong hands-on knowledge of ISO 27001 and SOC 2, with practical experience conducting gap assessments, mapping controls, collecting evidence, and driving remediation to closure.
• →Good working knowledge of Saudi cybersecurity and privacy requirements, particularly NCA ECC and KSA PDPL, with the ability to interpret requirements and translate them into actionable controls.
• →Demonstrated experience owning or managing cybersecurity risk registers, risk assessments, treatment plans, risk acceptance, exceptions, and management escalation.
• →Experience maintaining cybersecurity policies, standards, procedures, control libraries, control ownership, evidence repositories, and compliance documentation.
• →Proven ability to coordinate internal and external audits, manage evidence requests, respond to customer security assessments, and support certification or assurance readiness.
• →Strong analytical skills and the ability to turn complex risk and compliance information into clear dashboards, executive summaries, and decision-ready committee reporting.
• →Stakeholder management skills, with the confidence to challenge control owners constructively, drive accountability, and follow actions through to completion.
• →Strong written and verbal communication in English, including the ability to write clear policies, risk statements, assessment findings, remediation actions, and management reports.
• →Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, or a related discipline, or equivalent relevant professional experience.

• Experience working in FinTech, payments, SaaS, or another regulated and technology-driven environment.
• Experience with SAMA cybersecurity requirements or supporting cybersecurity compliance activities for a regulated payment or financial-services entity.
• Professional certifications such as ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, CISA, CISSP, or equivalent.
• Experience with PCI DSS, third-party cybersecurity risk management, privacy compliance, or other regional and international security frameworks.
• Hands-on experience with GRC platforms, evidence automation, compliance tooling, or building structured control and risk reporting workflows.
• Experience operating across multiple business entities, countries, or regulatory environments.
• Arabic language skills for engaging with stakeholders, regulators, and documentation.

What We Offer You❗

We believe you will love working at Foodics!

• We offer highly competitive compensation packages, including bonuses and the potential for shares.
• We prioritize personal development and offer regular training and an annual learning stipend to tackle new challenges and grow your career in a hyper-growth environment.
• Join a talented team of over 30 nationalities working in 14 countries, and gain valuable experience in an exciting industry.
• We offer autonomy, mentoring, and challenging goals that create incredible opportunities for both you and the company.