Cybersecurity GRC Manager

Key Responsibilities - Develop, implement, and continuously improve the Cyber Security Governance framework, policies, standards, and procedures. - Lead the creation and execution of the Cyber Security Strategy, aligning it with overall business goals. - Provide regular reports to the CISO and executive management on the state of cybersecurity. - Establish and manage a security metrics and Key Performance Indicator (KPI) program to measure program effectiveness. - Design and manage a comprehensive enterprise-wide Cyber Security Risk Management program. - Conduct regular risk assessments, including Business Impact Analysis (BIA), to identify, analyze, and evaluate information security risks. - Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation strategies. - Manage the vendor risk management program, assessing the security posture of third-party vendors, especially cloud service providers and payment gateways. - Integrate risk management into the Software Development Life Cycle (SDLC) and change management processes. - Ensure continuous compliance with SAMA's Cyber Security Framework (CSF), Insurance Authority, NCA requirements, and other relevant regulations. - Manage the process for obtaining and maintaining necessary regulatory licenses and certifications from a cybersecurity perspective. - Prepare and submit accurate and timely regulatory reports, questionnaires, and evidence requests.