GRC and Information Security Manager

Overview

Regulatory pressure from NCA Saudi and other regional frameworks is creating consistent demand for GRC and information security management professionals. ION Talent is building a network of GRC Managers and Analysts for current and upcoming opportunities in Riyadh, across financial services, government and technology clients.

Responsibilities

• Own the information security risk register and control framework
• Lead ISO 27001, NIST CSF and regulatory compliance programmes
• Conduct risk assessments, gap analyses and maturity reviews
• Manage security awareness training and phishing simulation
• Prepare board and regulatory risk reporting

Requirements

• CISM, CRISC, ISO 27001 Lead Auditor or equivalent
• 5+ years in information security GRC
• Practical knowledge of UAE and KSA regulatory frameworks
• Strong written communication and executive reporting skills