Experienced Cybersecurity GRC Manager

Provide co-sourced operational support to run the client s cybersecurity function, including execution of agreed processes and coordination with stakeholders; Support the establishment and maintenance of the cybersecurity operating model, roles, and responsibilities; Run governance and reporting rhythms, including operational meetings, management reporting, and cybersecurity committee updates; Ensure ongoing compliance with NCA ECC/CCC, PDPL, ISO 27001, and other applicable regulations; Maintain and update the NCA ECC/CCC control mapping matrix and track compliance status; Support cyber risk management activities, including maintaining risk registers and monitoring mitigation actions; Monitor regulatory updates (NCA, SDAIA, CST, NDMO) and perform impact assessments, recommending updates to policies, processes, and roadmap; Maintain regulatory-ready evidence repositories to support audits, inspections, and client inquiries; Support internal and external audits, including NCA, SDAIA, and CST inspections; Coordinate responses to client cybersecurity inquiries and assurance requests; Maintain incident response readiness and support incident handling activities; Ensure proper documentation of incidents, lessons learned, and improvement actions; Support the execution and periodic update of the cybersecurity roadmap.Track performance against KPIs, SLAs, and cybersecurity objectives.

Strong hands-on experience with Saudi cybersecurity regulations and frameworks, including National Cybersecurity Authority (NCA) frameworks (ECC, CCC) 2) Ability to interpret and operationalize local regulatory requirements into enterprise controls 3) Proven capability to design and implement enterprise cybersecurity governance models, including policies, standards, and procedures risk governance committees 4) Being already established in KSA 5) Aligned with Saudi Cyber Risk Reporting regulations 6) Stakeholder Management in Saudi Context