Cybersecurity GRC Manager

Tasks and Responsibilities:

• Develop, implement, and continuously improve the Information Security Governance framework, policies, standards, and procedures.

• Lead the development and execution of the Cybersecurity Strategy in alignment with HALA s business goals.

• Provide regular cybersecurity posture reports to the Board of Directors and executive management.

• Establish and manage a cybersecurity metrics and KPI program to measure program effectiveness and track progress.

• Oversee the information security budget and ensure effective allocation of resources.

• Design and manage a comprehensive enterprise-wide Cybersecurity Risk Management program.

• Conduct regular risk assessments and Business Impact Analyses (BIA) to identify, analyze, and evaluate information security risks.

• Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation, acceptance, or transfer.

• Manage vendor risk, including assessing the security posture of third-party vendors, cloud providers, and payment partners.

• Integrate risk management requirements into SDLC and change management processes.

• Act as the primary point of contact and subject matter expert for all regulatory cybersecurity examinations and audits (e.g., SAMA, CMA).

• Ensure continuous compliance with SAMA CSF, PCI DSS, and all relevant regulatory frameworks and standards.

• Manage regulatory licensing and certification requirements related to cybersecurity.

• Prepare and submit regulatory reports, evidence packages, questionnaires, and compliance documentation in a timely manner.

• Monitor and interpret regulatory changes and proactively advise the business on required updates.

• Manage all internal and external cybersecurity audits, including coordination, evidence collection, and follow-up.

• Develop and maintain a robust control testing and assurance program to validate the effectiveness of security controls.

• Oversee the remediation of all audit and assessment findings, ensuring they are resolved permanently.