cybersecurity compliance manager

Al Jomaih Energy and Water

<div>Overview
The cybersecurity GRC manager helps run the governance, risk, and compliance program across AEW and AEW-served companies. The role is expected to drive policy lifecycle, assessments, audits, exceptions, third-party risk, and regulatory alignment. Role is expected to coordinate remediation with AEW Digital Services/IT and counterparts at serviced entities.
Key Responsibilities
Governance &amp; Policy<ul>
<li>
Maintain AEW&rsquo;s cybersecurity policy/standard/procedure library; run annual review cycle; map to ECC-2:2024 and other applicable NCA controls (OTCC/CSCC/OSMACC) and relevant international baselines (e.g., ISO 27001).</li>
<li>Publish and track mandatory control exceptions with end dates and risk acceptance.</li>
</ul>
Compliance &amp; Assurance<ul>
<li>
Plan and run internal assessments for AEW and serviced entities; prepare for external inspections; maintain evidence library.</li>
<li>Use the NCA ECC-2 Assessment &amp; Compliance Tool when applicable; produce gap analyses and remediation plans.</li>
</ul>
Risk Management<ul>
<li>
Maintain the cyber risk register; facilitate business-owned risk decisions; integrate with enterprise risk.</li>
<li>Run control design/effectiveness reviews ahead of audits.</li>
</ul>
Third-Party &amp; Cloud<ul>
<li>
Ensure enforcement of third party cybersecurity controls in line with ECC-2:2024 &ldquo;third-party and cloud computing&rdquo; domain.</li>
<li>Coordinate with Procurement and Legal.</li>
</ul>
Awareness &amp; Training<ul><li>
Define compliance-focused awareness training plan and track completion.</li></ul>
Reporting &amp; Governance<ul><li>
Provide monthly KPI packs to the Head of Digital Services and Cybersecurity Steering Committee.</li></ul>
Qualifications &amp; Skill Sets<ul>
<li>
Bachelor&rsquo;s degree. 3&ndash;7 years in cybersecurity GRC or audit.</li>
<li>Proven work with NCA frameworks (ECC-2:2024; plus OTCC/CSCC/OSMACC as applicable to entity scope).</li>
<li>Strong policy writing, audit, and risk facilitation skills; Arabic and English business proficiency.</li>
<li>Preferred: ISO/IEC 27001 LA/LI, CISM, CRISC (or equivalent).</li>
</ul>
Travel
Regular travel within Saudi Arabia and other relevant countries as required by the business.</div>

Manager -Cybersecurity GRC-Saudi National

Stitch

Job Title: Cyber Security Officer &ndash; Compliance, Risk &amp; CryptographyLocation: United Arab EmiratesExperience Level: 8+ yearsDepartment: Information Security / Risk &amp; ComplianceReports To: Chief Information Security Officer (CISO) / Head of Security GovernancePosition OverviewWe are seeking a seasoned Cyber Security Officer to lead and maintain our organization&rsquo;s information security, compliance, and cryptographic infrastructure. The ideal candidate will bring deep expertise in PCI DSS, ISO 27001, SOC 1 &amp; 2, and privacy-related standards, combined with a strong understanding of SAMA Cyber Security Framework (CSF), NCA ECC and CCC, and Sarie security controls.This role will drive cybersecurity strategy, governance, and architecture, ensuring the organization&rsquo;s systems, data, and payment infrastructure remain secure, compliant, and resilient to emerging threats.Key ResponsibilitiesInformation Security Governance &amp; Strategy<ul><li>Develop and maintain the organization&rsquo;s cybersecurity strategy, roadmap, and governance framework.</li><li>Define, implement, and maintain security policies, standards, and procedures in alignment with international best practices (ISO, PCI, NIST).</li><li>Lead risk assessments, gap analyses, and develop mitigation strategies across business units.</li><li>Oversee internal and external cybersecurity audits and coordinate responses and remediation.</li><li>Report key risk and compliance metrics to executive management and regulatory stakeholders.</li></ul>Compliance &amp; Certifications<ul><li>Maintain and ensure ongoing compliance with:</li><li>PCI DSS (including PCI PIN and P2PE)</li><li>ISO 27001, SOC 1 &amp; SOC 2, ISO 27701 (Privacy Information Management)</li><li>SAMA Cyber Security Framework (CSF) and NCA ECC/CCC</li><li>Sarie and UAE Central Bank regulatory requirements</li><li>Oversee audit readiness, manage evidence collection, and coordinate with QSA and internal audit teams.</li><li>Drive continuous improvement in security maturity and compliance posture.</li></ul>Cryptography &amp; Key Management<ul><li>Manage HSM operations, cryptographic key generation, rotation, and destruction procedures in compliance with PCI PIN and PCI DSS.</li><li>Maintain Key Management Systems (KMS) and enforce strict segregation of duties and dual control mechanisms.</li><li>Develop and review Key Management Policies (KMP) and ensure secure storage, handling, and lifecycle documentation.</li><li>Support encryption architecture, ensuring data confidentiality and integrity across systems and payment channels.</li></ul>Cybersecurity Architecture &amp; Operations<ul><li>Define and maintain cybersecurity architecture and ensure integration of secure design principles across IT and fintech platforms.</li><li>Collaborate with infrastructure, DevOps, and product teams to embed security by design in new systems and applications.</li><li>Evaluate and implement security tools such as SIEM, DLP, IAM, EDR, and vulnerability management solutions.</li><li>Lead incident response and root cause analysis (RCA) for major security events and ensure lessons learned are institutionalized.</li></ul>Internal Audit &amp; Risk Management<ul><li>Conduct periodic internal audits of critical systems, data flows, and control environments.</li><li>Identify control gaps and lead remediation plans in coordination with technology and compliance teams.</li><li>Support third-party risk assessments, ensuring vendors adhere to corporate and regulatory security standards.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in information security, Computer Science, or related field</li><li>8+ years of experience in cybersecurity, compliance, and information security governance, preferably in fintech, banking, or payment processing.</li><li>Proven expertise in maintaining compliance with PCI DSS, PCI PIN, ISO 27001, SOC 1 &amp; 2, ISO 27701, and related privacy standards.</li><li>Strong working knowledge of SAMA CSF, NCA ECC/CCC, and Sarie frameworks in the GCC context.</li><li>Hands-on experience with HSMs (Thales, Utimaco, SafeNet, etc.), cryptographic key management, and secure key ceremonies.</li><li>Familiarity with cybersecurity architecture, risk management, and threat mitigation frameworks (NIST CSF, CIS, ISO 27005).</li><li>Strong understanding of network security, encryption standards, incident response, and vulnerability management.</li><li>Excellent communication, leadership, and stakeholder management skills.</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Auditor, PCI ISA / QSA.</li><li>Experience working with financial regulators in the GCC and managing multi-audit environments.</li><li>Exposure to Cloud Security (ISO 27017/27018, CSA CCM) and privacy regulations (GDPR, DIFC, ADGM DP Law).</li><li>Strong presentation and executive reporting capabilities.</li></ul>Key Performance Indicators (KPIs)<ul><li>Audit and certification renewal success rate (PCI DSS, ISO, SOC, etc.)</li><li>Security incident rate reduction and MTTR (Mean Time to Resolve)</li><li>Compliance gap closure and risk mitigation timelines</li><li>Security architecture and roadmap maturity level improvements</li><li>Stakeholder satisfaction and regulatory compliance audit outcomes</li></ul>Job Type: Full-time

cyber security officer

TechDefence Labs

<div>Assistant Manager Cyber Security. 
 
About the Role:
We are seeking an experienced and highly motivated individual to join our Information
Security team as an Assistant Manager of Information Security Compliance. In this role,
you will be responsible for overseeing the development, implementation, and
maintenance of our information security compliance program. You will work closely
with cross-functional teams across the organization to ensure we meet all applicable
standards and regulations. 
 
Responsibilities:
 Lead and manage the development and implementation of our information security
compliance program
 Conduct risk assessments and identify potential vulnerabilities.
 Select and implement appropriate security controls to mitigate identified risks
 Develop and maintain documentation related to our security program, including
policies, procedures, and standards
 Conduct internal audits and assessments to ensure compliance with relevant standards
and regulations
 Stay up-to-date on the latest industry best practices and regulatory requirements
 Communicate effectively with stakeholders at all levels of the organization
 Manage and mentor junior team members 
 
Qualifications:
 Minimum of 4 years of experience in information security compliance, with additional
experience preferred
 Strong understanding of information security standards and frameworks, such as ISO
27001, NIST Cybersecurity Framework, and HIPAA (depending on industry)
 Experience in conducting risk assessments and implementing security controls
 Proven ability to manage complex projects and deliver results on time and within
budget
 Excellent communication, interpersonal, and problem-solving skills
 Ability to work independently and as part of a team
 Strong analytical and critical thinking skills
 Proficiency in Microsoft Office Suite and project management tools 
 
Benefits:
 Competitive salary and benefits package
 Opportunity to work in a fast-paced and dynamic environment
 Make a real impact on the security of our organization
 Continuous learning and development opportunities 
 
Additional Information:
While regulatory compliances are derived from standards, a basic understanding of
relevant regulations for your industry is preferred. A strong grasp of risk management
principles and methodologies is highly beneficial.
Location- Ahmedabad</div>

Assistant Manager - Compliance

Saudi Global Ports

<div>
 
 
 Location: Dammam
 
 
 
 
 Job title: Cyber Security Executive
 
 
 
 
 Department: Cyber Security
 
 
 
 
 
 
 
 
 
 
 Job Purpose:
 
 
 
 
 
 
 The
 
 Cyber Security Executive
 
 supports the organization&rsquo;s cybersecurity function by assisting in governance, risk, and compliance (GRC) activities and cybersecurity operations, including monitoring, analysis, and incident support. The role is execution-focused and supports the effective implementation and operation of cybersecurity controls.
 
 
 
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 <ul>
 <li>
 Support the implementation and maintenance of cybersecurity policies, standards, and procedures.
 </li>
 <li>
 Assist in cybersecurity risk assessments, compliance reviews, and control assessments.
 </li>
 <li>
 Maintain and update cybersecurity risk registers and compliance trackers.
 </li>
 <li>
 Support internal and external cybersecurity audits by preparing documentation and evidence.
 </li>
 <li>
 Monitor and analyze cybersecurity alerts and escalate incidents as required.
 </li>
 <li>
 Support incident response activities, documentation, and post-incident reporting.
 </li>
 <li>
 Assist in vulnerability scanning, tracking, and remediation follow-up.
 </li>
 <li>
 Support the operation of cybersecurity tools (e.g., SIEM, endpoint security, IAM).
 </li>
 <li>
 Collaborate with cybersecurity operations, GRC, and technology teams.
 </li>
 <li>
 Support cybersecurity awareness activities and perform other related cybersecurity tasks as needed.
 </li>
 <li>
 Perform additional cybersecurity-related tasks, as required to support departmental objectives.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Experience &amp; Qualifications:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
 </li>
 <li>
 2&ndash;4 years of experience in cybersecurity, IT security, SOC, or GRC-related roles.
 </li>
 <li>
 Basic knowledge of cybersecurity frameworks and controls (e.g., ISO 27001, NIST CSF).
 </li>
 <li>
 Familiarity with security monitoring, incident handling, or risk/compliance activities.
 </li>
 <li>
 Entry-level or associate certifications (e.g., Security+, ISO 27001, SC-200) or similar are a plus.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Core Competencies:
 
 
 
 
 
 <ul>
 <li>
 Strong analytical and documentation skills
 </li>
 <li>
 Attention to detail
 </li>
 <li>
 Willingness to learn and adapt
 </li>
 <li>
 Team-oriented mindset
 </li>
 <li>
 Clear communication skills
 </li>
 </ul>
</div>

Cyber Security Executive

SoftConsults

We are looking for an IT Manager for an Exchange Company who will be responsible for planning, implementing, and overseeing the organization&rsquo;s IT systems and infrastructure. This role ensures the secure, efficient, and reliable operation of IT systems while aligning technology initiatives with business goals to manage a Financial Institution.Key Responsibilities&middot; Plan, design, implement, and manage the organization&rsquo;s IT infrastructure, including hardware, software, networks, servers, and cloud-based systems&middot; Oversee daily IT operations to ensure system reliability, availability, and performance while providing strong technical leadership and guidance to the IT team&middot; Establish and maintain robust cybersecurity measures, ensuring data protection, system security, regular backups, and effective disaster recovery and business continuity plans&middot; Develop, manage, and control IT budgets, negotiate with vendors, and oversee technology procurement to ensure cost-effective and high-quality solutions&middot; Define, implement, and enforce IT policies, procedures, standards, and best practices across the organization&middot; Monitor system performance, identify potential issues proactively, and ensure timely resolution of technical incidents and service disruptions&middot; Lead and manage IT projects, including system upgrades, migrations, integrations, and deployment of new technologies, ensuring projects are delivered on time and within budget&middot; Collaborate closely with internal stakeholders and department heads to assess business requirements and deliver effective technology solutions&middot; Ensure compliance with applicable regulations and standards, best practices, and cybersecurity requirements.Skills &amp; Competencies&middot; IT infrastructure management (servers, networks, and systems)&middot; Cybersecurity and data protection&middot; Cloud computing and virtualization&middot; Network administration and troubleshooting&middot; System monitoring, backup, and disaster recovery&middot; High proficiency in IT infrastructure managementRequired Qualifications&middot; Bachelor&rsquo;s degree in Information Technology, Computer Science, or a related field&middot; Proven experience as an IT Manager or in a similar leadership role, with at least 5 year of experience in the same position&middot; Strong knowledge of IT systems, networks, cybersecurity, and cloud technologies&middot; Experience of managing IT staff and coordinating cross-functional teams&middot; Excellent problem-solving, organizational, and communication skillsJob Type: Full-timePay: Rs50,000.00 - Rs90,000.00 per monthWork Location: In person

IT Manager

HCLTech

<div><div><div><h1 class="jobSectionHeader">Senior Technical Software Engineer III</h1>
</div><div><div>Bangalore
</div></div><div><div>7.5-12 Years
</div></div><div><div>INDIA
</div></div><div>Job Family
<div>Engineering
</div></div><div>Job Description (Posting).
<div>JD for Engineering Manager:At BigFix, our mission is to manage every endpoint, unifying Security Operations, and IT Operations for the world s leading enterprises. We provide the industry s leading endpoint management platform, spanning the broadest set of endpoints, aligning IT and Security with seamless automation and insightful reportsPosition Overview:We are seeking a highly skilled and motivated Manager of Software Engineering to join our team. As a Manager of Software Engineering, you will be responsible for leading the development of BigFix and its suite of products.BigFix is a suite of products that provides a fast and intuitive solution for compliance, endpoint, and security management and allows organizations to see and manage physical and virtual endpoints through a single infrastructure, a single console, and a single type of agent. You will collaborate with a talented team of software engineers and data scientists to build innovative solutions that address security threats, compliance problems, cybersecurity vulnerabilities. If you are passionate about endpoint management of systems, Security vulnerabilities detection technology, cybersecurity, analytics and have a strong development background preferably in Python and Node.js, and possess excellent leadership skills, we want to hear from you!We are looking for a passionate technical manager who helps us to build a strong technical leader from the India lab as we are transforming our product to be in SaaS, AI era. Responsibilities:- Lead and manage a team of software engineers in the development of the fully automated End point management software.- Collaborate with cross-functional teams, enterprise architects and product managers, to define product requirements and deliver high-quality software solutions.- Prior experience in SaaS development/migration projects; Technical background in Java, GoLang, front end technologies or equivalent modern development technologies.- Drive the implementation of best practices and coding standards to ensure high-quality code.- Provide technical guidance and mentorship to the software engineering team.- Manage the software development lifecycle, including planning, estimation, and execution of projects.- Conduct code reviews and ensure adherence to software engineering principles.- Collaborate with stakeholders to prioritize and manage product roadmap and release schedules.- Stay up to date with industry trends and emerging technologies related to cybersecurity and software development. Mandate Skill:- Bachelor's or Master's degree in Computer Science, Engineering, or a related field.- 12 to 14 years of proven experience in software engineering, including hands-on development and leading software projects.- Strong proficiency in modern development languages, with a deep understanding of their respective ecosystems.- Proven experience in software engineering, including hands-on development and leading software projects.- Solid understanding of Endpoint security management, patch strategies cybersecurity concepts and vulnerability remediation strategies- Experience in building analytics or data-driven products.- Familiarity with cloud platforms and technologies, such as AWS or Azure.- Excellent problem-solving and analytical skills.- Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams.- Leadership experience, including the ability to motivate and inspire a team of software engineers.- Proven track record of designing and building scalable, high-performance analytics products- Experience with data modeling, data integration, and ETL processes in the context of cybersecurity analytics. ( Preferable)-</div>
</div><div>Qualification
<div>Bachelor of Technology/ Engineering
</div></div><div>No. of Positions
<div>1</div>
</div><div>Skill (Primary)
<div>Technical Skills-Automation-PnP-HCL Eagle/IBM BigFix
</div></div><div>Auto req ID
<div>1637733BR</div></div></div></div><div></div>

Senior Technical Software Engineer III

Talenzen

We are seeking a motivated and results-driven Sales Engineer / Account Manager with experience in Operational Technology (OT) Cybersecurity. The role combines technical pre-sales support with account management and new business development. The ideal candidate will work closely with internal technical teams and clients to deliver tailored OT cybersecurity services, ensuring secure, compliant, and resilient industrial environments.Key ResponsibilitiesSales &amp; Business Development<ul><li>Identify, qualify, and pursue new business opportunities within the OT cybersecurity domain.</li><li>Carry and consistently meet or exceed assigned sales quotas and targets.</li><li>Manage the complete sales cycle, from lead generation to deal closure.</li></ul>Account Management &amp; Client Engagement<ul><li>Build, manage, and strengthen long-term relationships with clients and partners.</li><li>Understand customer operational and cybersecurity requirements and position suitable solutions.</li><li>Act as the primary point of contact for assigned accounts.</li></ul>Technical Pre-Sales &amp; Solution Support<ul><li>Provide technical support during the sales process, including solution positioning and service demonstrations.</li><li>Conduct technical presentations and demonstrations aligned with customer needs and OT environments.</li><li>Address technical queries from both technical and non-technical stakeholders.</li></ul>Proposal &amp; Contract Management<ul><li>Collaborate with pre-sales and technical teams to develop competitive proposals and responses to RFPs/RFQs.</li><li>Prepare, present, and negotiate commercial and contractual terms with clients and partners.</li></ul>CRM &amp; Sales Operations<ul><li>Maintain accurate and up-to-date records of opportunities, activities, and pipelines using CRM tools.</li><li>Ensure timely follow-ups, forecasting, and reporting against KPIs.</li></ul>Cross-Functional Collaboration<ul><li>Work closely with internal engineering and delivery teams to ensure seamless service implementation.</li><li>Provide structured feedback on customer requirements, solution gaps, and customization needs.</li></ul>Market Intelligence &amp; Industry Awareness<ul><li>Stay current with OT cybersecurity trends, threats, regulations, and competitive landscape.</li><li>Identify new market opportunities and contribute to go-to-market strategies.</li></ul>Post-Sales &amp; Customer Success<ul><li>Support smooth handover from sales to delivery teams.</li><li>Assist during implementation and deployment phases to ensure customer satisfaction and retention.</li></ul>Continuous Learning &amp; Development<ul><li>Continuously enhance knowledge of OT cybersecurity technologies, services, and sales methodologies.</li><li>Participate in trainings, workshops, and industry events as required.</li></ul>QualificationsEducation<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field</li></ul>OR<ul><li>MBA in Sales &amp; Marketing</li></ul>Experience<ul><li>3&ndash;6 years of experience in sales engineering, technical sales, or pre-sales roles.</li><li>Prior experience in cybersecurity sales is required; OT / ICS cybersecurity experience is a strong advantage.</li></ul>Technical Knowledge<ul><li>Basic understanding of OT / ICS environments, industrial protocols, and OT cybersecurity frameworks.</li><li>Familiarity with regulations such as NCA-OTCC is preferred.</li><li>Exposure to cybersecurity technologies and services such as:</li><li>Threat Detection, Firewalls, SIEM, Endpoint Security, Data Diodes</li><li>Risk Assessment, VAPT, Compliance Audits, Professional Services</li><li>Awareness of leading OT security vendors is an advantage.</li></ul>Sales &amp; Analytical Skills<ul><li>Proven experience carrying and achieving sales quotas.</li><li>Strong understanding of sales cycles, KPIs, and pipeline management.</li><li>Ability to assess customer needs and recommend appropriate cybersecurity solutions.</li></ul>Communication &amp; Soft Skills<ul><li>Excellent verbal and written communication skills in English and Arabic.</li><li>Strong presentation, negotiation, and interpersonal skills.</li><li>Customer-centric mindset with strong problem-solving abilities.</li><li>Ability to work independently as well as collaboratively in a team environment.</li></ul>Certifications (Preferred)<ul><li>CompTIA Security+, CEH, CISSP</li><li>ISA/IEC 62443 or other relevant OT cybersecurity certifications</li></ul>Location &amp; Mobility<ul><li>Must be based in Riyadh, Saudi Arabia.</li><li>Local residency and a valid driving license are mandatory.</li></ul>Job Types: Full-time, PermanentPay: ﷼15,000.00 - ﷼20,000.00 per monthExperience:<ul><li>total work: 3 years (Preferred)</li><li>OT Cybersecurity Sales: 3 years (Preferred)</li></ul>Language:<ul><li>Arabic (Preferred)</li><li>English (Preferred)</li></ul>

Sales Engineer - OT Cybersecurity

Search 10000+ Cybersecurity compliance manager jobs near you this January. New roles added regularly across leading industries. Apply today.