GRC Manager – Cybersecurity Governance, Risk & Compliance

About the role

The GRC Manager will lead the design, implementation and maintenance of governance, risk and compliance frameworks for cybersecurity at CYBER. Working in a hybrid model, you will ensure policies are up‑to‑date, practical and enforced across the organization.

Key responsibilities

• Develop and maintain GRC frameworks aligned with ISO 27001, NIST CSF or similar standards.
• Lead risk assessments, manage the risk register and coordinate remediation with technical and business teams.
• Prepare regular reports and dashboards for senior leadership.
• Oversee security audits, compliance reviews and third‑party risk assessments.
• Collaborate with IT, security operations, physical security, legal and business stakeholders.
• Drive security awareness initiatives and support incident response from a governance perspective.
• Continuously improve controls in line with emerging threats and best practices.

Required profile

• Strong background in information security and cybersecurity.
• Experience applying ISO 27001, NIST CSF or comparable frameworks.
• Solid understanding of network security concepts and physical security integration.
• Proven track record in GRC roles, including risk assessments, control testing and regulatory compliance.
• Bachelor’s degree in Information Security, Computer Science, Information Systems or related field.
• Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer/Auditor are highly desirable.
• Professional proficiency in English; Arabic is a plus.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• Network Security
• Physical Security principles
• Risk Assessment
• Control Testing
• Regulatory Compliance
• Third‑party Risk Management