What You Will Do (Key Accountabilities):

• Compliance Leadership: Drive the successful implementation and continuous adherence to key regulatory and industry frameworks, including SAMA Cyber Security Framework, PCI DSS, and ISO 27001.
• Policy & Documentation: Own the drafting, maintenance, and enforcement of comprehensive cybersecurity policies, procedures, and standards across the organization.
• Audit Management: Coordinate and assist internal teams during PCI DSS and ISO 27001 annual external audits, ensuring timely remediation and gap closure.
• Risk Management: Execute and maintain the Cyber Security Risk Assessment program, managing the risk register and reporting on GRC progress to stakeholders.
• Security Integration: Represent the GRC function in the Change Management Process and engage in early-stage business projects to embed required security controls and ensure compliance from the outset.
• Awareness & Incident Support: Conduct organization-wide security awareness training and provide GRC support during security incident response and root cause analysis (RCA) activities.