project manager

contracts manager

quality manager

construction manager

general manager

grc manager

TAWANTECH

<div>Requirements
We are seeking an experienced Governance, Risk &amp; Compliance (GRC) Manager to lead IT governance, risk, and compliance initiatives in alignment with SAMA IT Governance Framework and international best practices. The ideal candidate will bring extensive experience in banking/financial services and a strong track record in regulatory compliance, IT risk management, and enterprise governance frameworks (COBIT, ITIL, ISO).<h3 class="jobSectionHeader">
Key Responsibilities</h3><ul>
<li>Develop, implement, and manage the IT Governance &amp; Compliance framework across the organization.
</li><li>Ensure full alignment with SAMA IT Governance Framework (ITGF), local regulatory requirements, and global standards (COBIT, ISO 27001, ISO 20000, ITIL).
</li><li>Lead IT audits, risk assessments, and compliance reviews to ensure effective controls and mitigate risks.
</li><li>Drive enterprise-wide risk management strategies and regulatory compliance initiatives.
</li><li>Oversee policies, procedures, and process improvements to strengthen governance and operational excellence.
</li><li>Collaborate with internal stakeholders and external regulators (e.g., SAMA) to ensure audit readiness and compliance.
</li><li>Lead business continuity and disaster recovery planning (BCP &amp; DRP) for IT operations.
</li><li>Provide strategic advisory on IT contracts, budgets, licensing compliance, and vendor management.
</li><li>Coach and guide teams on IT governance, security, and compliance best practices.
</li></ul><h3 class="jobSectionHeader">Qualifications &amp; Experience</h3><ul>
<li>Bachelor&rsquo;s or Master&rsquo;s degree in IT, Finance, or related field (MBA/Engineering preferred).
</li><li>10+ years of experience in IT Governance, Risk, and Compliance, with at least 5 years in banking or financial services.
</li><li>Hands-on experience with SAMA IT Governance Framework (ITGF) implementation or equivalent regulatory frameworks.
</li><li>Strong knowledge of COBIT, ITIL, ISO 27001, ISO 20000, NIST, PCI DSS.
</li><li>Proven experience in IT audits, regulatory compliance, and risk management.
</li><li>Certifications preferred: CISA, CISM, CISSP, CGEIT, GRCP/GRCA, COBIT2019, ITIL.
</li><li>Excellent leadership, stakeholder management, and communication skills.
</li><li>Prior experience in Saudi Arabia or GCC region is a strong plus.</li></ul></div>

(GRC) Manager

Sanam

Position Overview: We are seeking an experienced Cybersecurity GRC Manager to design, implement, and oversee SANAM&rsquo;s GRC framework. The role requires aligning cybersecurity practices with national and international regulatory standards (SAMA CSF, NCA ECC, PDPL, ISO 27001, PCI DSS, NIST, etc.), conducting comprehensive risk assessments, compliance audits, gap analyses, and full-cycle framework implementations. The ideal candidate combines strategic vision with hands-on execution, ensuring that SANAM maintains a strong security posture, regulatory compliance, and stakeholder trust.Key Responsibilities: <ul><li>Develop, maintain, and oversee the Cyber Security framework, including processes, policies, procedures, standards, and guidelines.</li><li>Design, implement, and maintain risk management processes &amp; delivering risk-based cyber security solutions that address people, process and technology.</li><li>Align cybersecurity and governance practices with national and international regulatory standards.</li><li>Lead the full risk assessment lifecycle: identification, prioritization, mitigation, and reporting of SANAM&rsquo;s information assets.</li><li>Conduct comprehensive compliance audits and gap analyses.</li><li>Maintain and update the risk register while monitoring and reporting mitigation efforts.</li><li>Manage compliance with SAMA CSF, PDPL, ISO 27001, NCA ECC, PCI DSS, and other frameworks.</li><li>Conduct internal audits and assessments to identify gaps and ensure timely remediation.</li><li>Lead awareness and training programs for staff, customers, and third parties.</li><li>Oversee Third-Party Risk Assessments (TPRA) and vendor compliance with policies, regulations, and SLAs.</li><li>Manage relations with regulators, auditors, and GRC related external stakeholders.</li><li>Oversee CS committee meetings and ensure structured governance reporting.</li><li>Lead SANAM&rsquo;s representation in regulatory inspections, cybersecurity compliance assessments, and GRC-related audits, ensuring the organization demonstrates a robust posture of CS governance, risk management, and compliance.</li><li>Measuring and reporting the KRIs and KPIs and providing regular updates to the CEO and senior management.</li><li>Perform any additional GRC-related responsibilities as assigned to support SANAM&rsquo;s evolving compliance and risk landscape.</li></ul>Qualifications: <ul><li>Saudi national (Preferred)</li><li>4+ years of experience in Cybersecurity GRC within financial services, fintech, or regulated industries.</li><li>Proven experience in risk assessments, compliance audits, gap analyses, and full-cycle framework implementations.</li><li>Deep knowledge and practical experience with frameworks like SAMA CSF, NCA ECC, PDPL standards.</li><li>Strong understanding of governance best practices and policy development.</li><li>Excellent English communication skills.</li><li>Strong analytical, documentation, and reporting abilities.</li></ul>Soft Skills: <ul><li>Strong attention to detail and disciplined approach to compliance and governance.</li><li>Strategic thinker with the ability to balance regulatory requirements and business needs.</li><li>Exceptional communication and presentation skills for engaging senior management and regulators.</li><li>Resilient under pressure, particularly during audits and regulatory reviews.</li><li>Blend of strategic vision and hands-on execution, driving both high-level initiatives and detailed implementations.</li><li>Strong Sense of Ownership: Takes initiative and responsibility for tasks and projects.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Are you a Saudi National?</li><li>What is your salary expectation in SAR?</li></ul>Experience:<ul><li>Cybersecurity: 4 years (Required)</li></ul>License/Certification:<ul><li>Cybersecurity Certificates (Preferred)</li></ul>Location:<ul><li>Riyadh (Preferred)</li></ul>

Cybersecurity GRC Manager

- Governance, Risk & Compliance (GRC) Manager

Shamrock Value Private Limited

Exciting Career Opportunity: Senior Manager &ndash; GRC (Capital Projects)Location Preference: Morocco, Jordan, or Tunisia Language Requirement: Bilingual &ndash; Arabic &amp; English (mandatory)About the RoleWe are seeking a high-performing Senior Manager to lead the Governance, Risk, and Compliance (GRC) function for Capital Projects. This leadership role focuses on driving risk management excellence, strengthening compliance frameworks, and building trusted client relationships across large-scale construction, real estate, and infrastructure projects.You will lead strategic initiatives, manage a talented team, and play a critical role in business development and growth while shaping the future of GRC services in the region.Key Responsibilities<ul><li>Enhance GRC Frameworks: Assess, design, and strengthen governance, risk, and compliance practices for complex capital projects.</li><li>Enterprise Risk Management (ERM): Implement robust ERM frameworks, including risk identification, assessment, and mitigation.</li><li>Audits &amp; Compliance: Plan and execute risk-based audits, identify control gaps, and ensure regulatory compliance.</li><li>Incident Management: Create effective systems for identifying, investigating, and resolving critical issues.</li><li>Stakeholder Engagement: Deliver impactful reports and presentations to CXOs, Boards, and Audit Committees, providing actionable insights.</li><li>Business Development: Drive growth by identifying new opportunities, expanding services, and building strong client networks.</li><li>Team Leadership: Mentor and guide a high-performing team, fostering collaboration and excellence.</li><li>Stay Ahead: Monitor emerging risks, trends, and regulatory changes to provide forward-thinking solutions.</li></ul>Preferred Candidate Profile<ul><li>Education: Graduate degree required; advanced certifications such as MBA, CIA, CISA, CISSP are highly desirable.</li><li>Experience: 8&ndash;15 years of relevant experience in GRC, auditing, or consulting, with strong expertise in capital projects (construction, real estate, infrastructure).</li><li>Background: Experience with Big 4 or top-tier consulting firms is strongly preferred.</li><li>Language Skills: Fluency in Arabic and English (written and spoken) is mandatory.</li><li>Location: Preference for local candidates based in Morocco, Jordan, or Tunisia.</li></ul>Core Skills<ul><li>Strong knowledge of risk management, audit standards, and compliance processes.</li><li>Excellent leadership, communication, and negotiation skills.</li><li>Proven ability to manage multiple priorities and deliver results in high-pressure environments.</li><li>Strong problem-solving and analytical mindset with a strategic approach.</li><li>Willingness to travel domestically and internationally for client engagements.</li><li>Positive, proactive, and adaptable leadership style.</li></ul>Apply Now : Maaz@shamrockvalue.comJob Type: Full-timePay: &#65020;28,000.00 - &#65020;33,000.00 per month

Senior Manager - GRC Projects

Confidential Government

<div>
 
 
 Job Brief
 
 
 
 
 
 
 We're seeking a Governance, Risk, and Compliance experience to lead our efforts in maintaining a robust GRC framework. The ideal candidate will have extensive experience in developing and implementing policies, managing risk assessments, and ensuring regulatory compliance. This is a critical role that requires a strategic mindset and a deep understanding of the GRC landscape
 
 
 
 
 
 You will be responsible for overseeing the development, implementation, and maintenance of our organization's GRC program. Key responsibilities include:
 
 
 
 
 <ul>
 <li>
 
 Governance
 
 : Establishing and maintaining policies, procedures, and standards to ensure effective oversight and ethical conduct.
 </li>
 <li>
 
 Risk Management
 
 : Identifying, assessing, and mitigating operational, financial, and regulatory risks across the organization.
 </li>
 <li>
 
 Compliance
 
 : Ensuring adherence to relevant laws, regulations, and industry standards, and managing compliance audits.
 </li>
 <li>
 
 Reporting
 
 : Providing regular reports and updates on GRC status to senior management and key stakeholders.
 </li>
 </ul>
 
 
 
 
 
 Academics and Certifications
 
 
 
 
 
 <ul>
 <li>
 Bachelor's degree in Business, Law, Finance, or a related field is a minimum.
 </li>
 <li>
 Relevant professional certifications such as
 
 GRCA
 
 ,
 
 CIPP
 
 ,
 
 CRISC
 
 , or
 
 CGEIT
 
 are a plus.
 </li>
 </ul>
 
 
 
 
 
 Core Competencies
 
 
 
 
 
 <ul>
 <li>
 
 Regulatory Knowledge
 
 : In-depth understanding of industry-specific regulations and legal requirements.
 </li>
 <li>
 
 Analytical Skills
 
 : Proficiency in risk assessment methodologies and using data to identify and manage risks.
 </li>
 <li>
 
 Communication
 
 : Strong ability to communicate complex GRC concepts to both technical and non-technical audiences.
 </li>
 <li>
 
 Problem-Solving
 
 : A proactive approach to identifying potential risks and developing effective mitigation strategies.
 </li>
 <li>
 
 Attention to Detail
 
 : Meticulous in reviewing documents, policies, and procedures to ensure accuracy and compliance.
 </li>
 </ul>
</div>

Governance, Risk, Compliance, GRC

D360 Bank

<div>
 
 Job Description
 
 
 
 The role is responsible to responsible for playing a crucial part in overseeing the organization's information security program, with a focus on governance, risk management, compliance, security awareness, and policy management. He/she will ensure the company adheres to relevant regulatory, legal, and industry frameworks. He/she will work independently to assess compliance risks, prepare for audits, and collaborate cross-functionally to support a strong and sustainable compliance posture.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Develop, implement, and manage the organization&rsquo;s GRC framework aligned with regulatory requirements and industry best practices
 </li>
 <li>
 Lead internal and external information security audits; coordinate with stakeholders to ensure timely and effective remediation of findings.
 </li>
 <li>
 Oversee enterprise risk management practices, including risk identification, assessment, and mitigation related to information security.
 </li>
 <li>
 Manage the development and maintenance of security policies, standards, and procedures.
 </li>
 <li>
 Serve as the primary point of contact for security compliance matters, including regulatory audits and third-party assessments.
 </li>
 <li>
 Collaborate with Legal, IT, Internal Audit, and Business Units to ensure consistent compliance and risk management practices.
 </li>
 <li>
 Monitor changes in laws, regulations, and industry standards to assess impact and ensure ongoing compliance.
 </li>
 <li>
 Promote a culture of security and compliance awareness through training and stakeholder engagement.
 </li>
 <li>
 Perform any other duties assigned to by line manager related to the nature of the work
 </li>
 <li>
 Enforce, incorporate, and comply with all necessary controls and related information security policies, procedures, practices, training, reporting, personal due diligence and vigilance, within departmental/unit activities and operations.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 
 Preferred Qualifications
 
 
 
 
 <ul>
 <li>
 Have a tertiary level qualification from an internationally recognized institution in Information Technology or Computer Science.
 </li>
 <li>
 Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.
 
 
 </li>
 </ul>
 
 
 Years &amp; Nature of Experience
 
 
 
 
 <ul>
 <li>
 Recommended to have 5 to 7 years of equivalent experience where required competencies and experience has been demonstrated in Data Analytics, Data Operations, or related experience
 </li>
 <li>
 Advanced experience in information security, including GRC-related roles.
 </li>
 <li>
 Advanced experience in leading risk assessments, compliance efforts, security awareness initiatives, and policy management.
 </li>
 <li>
 Excellent communication and interpersonal skills for collaborating with various stakeholders.
 </li>
 <li>
 Advanced proficiency in conducting risk assessments, analyzing security controls, and policy management.
 
 
 </li>
 </ul>
 
 
 Technical Competencies
 
 
 
 
 <ul>
 <li>
 Data Governance
 </li>
 <li>
 Ethical Culture
 </li>
 <li>
 Data Mining &amp; Modelling
 
 
 </li>
 </ul>
 
 
 Behavioral Competencies
 
 
 
 
 <ul>
 <li>
 Digital Literacy
 </li>
 <li>
 Creative Thinking
 </li>
 <li>
 Communication
 </li>
 </ul>
</div>

Senior Manager - GRC Cybersecurity (Security Compliance)

Devoteam

<div>
 
 
 Company Description
 
 
 
 
 
 Tech for People Unlocks the Future
 
 
 
 At Devoteam, we believe that technology, combined with strong human values, can actively drive change for the better. Discover how Tech for People is shaping the future, creating a positive impact on individuals and the world around us.
 
 
 With over 25 years of passion for technology and a presence in 18+ countries across EMEA and beyond, we are committed to leveraging innovation, expertise, and human-centric values to make a difference.
 
 
 
 Devoteam Culture &amp; Values:
 
 
 
 True innovation is born from a powerful culture, fused with meaningful values.
 
 
 
 Culture:
 
 
 
 
 Fair and courageous
 
 
 
 Everyone is treated fairly &ndash; this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.
 
 
 
 
 
 Ambition and results
 
 
 
 Ambition is nurtured at every step &ndash; this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.
 
 
 
 
 
 Learning and innovating
 
 
 
 Curiosity and learning are at our core &ndash; this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.
 
 
 
 
 
 Caring and sharing
 
 
 
 A caring attitude is infused into our culture &ndash; this encourages sharing. We believe in the power of teams, we promote support and collaboration.
 
 
 At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers,&nbsp;
 
 
 
 Values:
 
 
 
 1. Respect
 
 
 2. Frankness
 
 
 3. Passion
 
 
 Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.
 
 
 To know more about us, please visit: www.devoteam.com
 
 
 &nbsp;
 
 
 
 
 Job Description
 
 
 
 
 We are looking for a highly skilled ServiceNow Consultant with hands-on experience in ServiceNow GRC to join our cybersecurity team. This role combines business analysis, development, and functional consulting, requiring a solid grasp of Governance, Risk, and Compliance principles and the ability to translate business needs into scalable technical solutions.
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Act as a Business Analyst and Developer for ServiceNow GRC implementations, upgrades, and customizations.
 </li>
 <li>
 Gather, analyze, and document business and technical requirements from stakeholders.
 </li>
 <li>
 Design and develop workflows, integrations, and dashboards within ServiceNow GRC.
 </li>
 <li>
 Provide advisory on GRC frameworks (ISO 27001, NIST, COBIT, etc.) and industry best practices
 </li>
 <li>
 Support client readiness for compliance with local Saudi cyber regulations (e.g., NCA, SAMA, CITC).
 </li>
 <li>
 Conduct gap assessments and deliver tailored GRC roadmaps and remediation plans.
 </li>
 </ul>
 
 
 
 Qualifications
 
 
 
 <ul>
 <li>
 Proven hands-on experience in ServiceNow GRC modules (Policy &amp; Compliance, Risk, Audit, Vendor Risk).
 </li>
 <li>
 Strong background in business analysis, requirements documentation, and stakeholder engagement
 </li>
 <li>
 Working knowledge of leading GRC platforms and tools in the market.
 </li>
 <li>
 Understanding of Governance, Risk, and Compliance concepts and frameworks.
 </li>
 <li>
 Familiarity with Saudi cybersecurity regulations is a strong plus.
 </li>
 <li>
 Excellent communication skills, both technical and non-technical.
 </li>
 </ul>
 
 
 
 Additional Information
 
 
 
 
 
 Business Unit: Cyber Trust
 
 
 
 
 Level: Junior - Mid Level
 
 
</div>

ServiceNow GRC Consultant

Explore 926+ Grc manager in Riyadh this October. Find roles across top companies and apply now to boost your career.