IT GRC Manager
About This Role
Welcome to Ninja, where we believe that we are shaping the future. At Ninja, we are passionate about creating user-friendly and visually stunning web applications that push the boundaries in design and innovation. We are looking for an experienced IT GRC Manager to enhance our Governance, Risk, and Compliance framework.
Key Responsibilities
- IPO & Regulatory Compliance: Lead IT compliance gap assessments against Saudi NCA ECC, PDPL, and CMA standards. Maintain IT controls evidence for IPO audits and collaborate with auditors, legal, and finance teams to ensure compliance and timely gap closure
- Governance & Policy: Enforce IT policies across 150+ locations, manage IT risk register, and coordinate governance reviews with CIO and CISO to align policies with security and business goals
- Risk Management: Conduct annual and ad-hoc IT risk assessments, set risk appetites, monitor vendor risks, and implement mitigation strategies to safeguard IT assets
- Audit & Assurance: Oversee IT audits, prepare evidence, track findings, ensure timely remediation, and report progress to the CIO
Requirements
- 5+ years in IT GRC, audit, or security compliance, with preferred experience in IPO, M&A, or regulatory listings
- Strong knowledge of Saudi NCA ECC and PDPL compliance
- Experience with cloud platforms (AWS, GCP) from a controls and compliance perspective
- Skilled in managing IT governance across multi-site or multi-country environments
- Certifications such as CISA (preferred), CRISC, or ISO 27001 Lead Auditor/Implementer required
- Familiar with frameworks including ISO 27001, NIST CSF, COBIT, and SOC 2
- Excellent report-writing skills and fluency in Arabic and English
Certifications (minimum of one required):
- CISA β preferred
- CRISC
- ISO 27001 Lead Auditor or Implementer
Skills:
- In-depth understanding of ISO 27001, NIST CSF, COBIT, and SOC 2 frameworks
- Capability to convert regulatory requirements into effective IT controls
- Exceptional written communication skills β reports will be submitted to the CIO, CISO, and Board members
- Fluency in both Arabic and English is mandatory
Similar Jobs
IT GRC Manager
Ninja Β· Riyadh
Lead IT compliance assessments, manage governance policies, conduct risk management, and oversee audits while ensuring fluency in Arabic and English.
1 months ago
Generate Resume βStop applying blindly.
Start getting hired.
Base Career automates the hardest parts of job searching β apply smarter, not harder.
AI Resume in 60s
Your resume rewritten for this exact role using the job description as the brief.
ATS-Optimized
Get past automated screening filters with the right keywords matched to each job.
Application Tracker
Track every job, follow-up, and interview in one visual kanban board.
Free plan Β· No credit card required