GRC Cyber Security Manager

Led comprehensive cybersecurity initiatives and governance efforts across the organization. Develop and implement comprehensive Information Security Strategy aligned with business goals. Conduct and coordinate risk assessments, penetration tests (PT), vulnerability assessments (VA), fraud investigations, and Risk and Control Self-Assessment (RCSA) processes. Stay informed on emerging threats, vulnerabilities, and security technologies, delivering actionable insights and recommendations. Participate in security audits, assessments, and compliance reviews, ensuring adherence to regulatory requirements and responding to security-related inquiries from Sr. Management/Board and regulatory authorities.

• Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL. GDPR. AML and PCI DSS.
• Applied expertise in security frameworks, ITS and standards, such as NIST CSF, CIS, NCA ECC, SAMA SCF, ISO 27001, along with regulatory compliance requirements like Regional Data Protection Laws, PDPL, GDPR, AML and PCI DSS.
• Analysed security events and incidents,coordinated investigations, and provided incident response and remediation support.
• Ensured compliance with regulatorystandards, including Central Banks. (CBB, SAMA, CBUAE, CBJ, CBJ, BDL etc.)
• Successfully maintained PCI DSS complianceand certification of Amex while enhancing security protocols to mitigate emerging threats and vulnerabilities.
• Managed cross-functional teams to ensurecompliance with regulatory standards. Perform risk assessments and gap analysis.
• Define and implement security controls,monitor risks and create mitigation plans
• Manage third-party/vendor risks. Track and report security incidents (from compliance side)

Experience:

• GRC Cyber Security Manager: 10 years (Preferred)

Language:

• Arabic, English (Preferred)

Work Location: In person