Opportunity at
FoodicsGlobal Cybersecurity GRC Manager
Foodics Group wants a Global Cybersecurity GRC Manager who will lead the day-to-day governance, risk and compliance work for cybersecurity across the group, reporting to the…
Career Tools
About This Role
Foodics Group wants a Global Cybersecurity GRC Manager who will lead the day-to-day governance, risk and compliance work for cybersecurity across the group, reporting to the CISO. The role turns frameworks, legal duties and business risk into concrete controls with accountable owners, trackable fixes and reporting that decision-makers can use. The position is high-visibility and cross-functional, partnering with security, engineering, product, legal, privacy, audit and business units. It also supports…
Job Description
Foodics Group wants a Global Cybersecurity GRC Manager who will lead the day-to-day governance, risk and compliance work for cybersecurity across the group, reporting to the CISO. The role turns frameworks, legal duties and business risk into concrete controls with accountable owners, trackable fixes and reporting that decision-makers can use.
The position is high-visibility and cross-functional, partnering with security, engineering, product, legal, privacy, audit and business units. It also supports Foodics Pay compliance work where required. The manager evaluates readiness against SAMA CSF, KSA PDPL, NCA ECC, ISO 27001 and SOC 2, and keeps the policy library current, including standards, procedures, owners, evidence, review schedules and approved exceptions.
The role owns the cybersecurity risk register, runs risk assessments and moves treatment plans, risk acceptances and late actions toward closure. It coordinates internal and external audits, customer security reviews and certification readiness, keeps a compliance calendar, and builds dashboards and committee reports. Process upgrades such as templates, control catalogs and better evidence handling are expected. It is a full-time, on-site position with no salary stated.
Responsibilities
- Lead the group-wide cybersecurity GRC program, setting priorities, rhythm and improvement projects
- Evaluate readiness against SAMA CSF, KSA PDPL, NCA ECC, ISO 27001 and SOC 2, and track findings to resolution
- Convert obligations into controls with owners, deadlines and evidence requirements
- Keep cybersecurity policies, standards, procedures, control catalogs and evidence stores current
- Maintain the risk register and push treatment, acceptance and overdue items forward
- Organize internal audits, external audits, customer security questionnaires and certification preparation
- Build KPI and KRI dashboards and committee-ready summaries
- Collaborate with control owners in technology, product, HR, legal, privacy and procurement
- Run a compliance calendar and improve efficiency through templates, automation and tools
Requirements
- Ten-plus years working in cyber governance, risk, compliance or audit, or an adjacent field
- Working fluency with ISO 27001 and SOC 2 controls, including gap work and remediation
- Working understanding of Saudi cyber and privacy rules, especially NCA ECC and KSA PDPL
- History of owning risk registers, assessments, mitigation plans, exceptions and escalations
- Track record maintaining policies, control ownership and compliance records
- Experience handling audit requests, evidence collection and customer security reviews
- Clear written and verbal English for policies, findings and leadership reports
- Degree in cyber, information security, IT, computing, risk or a related area, or equivalent experience
Qualifications
- Experience in FinTech, payments, SaaS or other regulated tech settings
- SAMA cybersecurity exposure in a regulated payments or finance business
- Holding ISO 27001 lead implementer or auditor training, or CISM, CRISC, CISA or CISSP
- PCI DSS, third-party risk, privacy or other international frameworks
- Use of GRC software, evidence automation or compliance tools
- Work across several legal entities, countries or regulators
- Arabic skills for stakeholders, regulators and documents
Core Skills
Benefits
- Pay package with bonuses and possible share participation
- Ongoing training and an annual learning allowance
- Independence, mentoring and demanding goals
- Teammates from more than 30 nationalities in 14 countries
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Who does the role report to?
The role runs cybersecurity GRC work and answers to the CISO.
Which frameworks does the role cover?
The posting cites SAMA CSF, KSA PDPL, NCA ECC, ISO 27001 and SOC 2, among other applicable requirements.
How much experience is needed?
Ten or more years in cyber governance, risk, compliance or audit, or an adjacent field.
What is the salary?
No salary is stated. The job is listed as full-time and on-site.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.