Join Saudi Global Ports as an Assistant Manager – Cybersecurity Governance, Risk & Compliance (GRC). This pivotal role supports the execution of cybersecurity governance, risk, and compliance activities across the organization. You will operationalize GRC programs, conduct risk assessments, and ensure controls are effective under the guidance of the GRC Manager.
Key Responsibilities:- Implement and maintain Cybersecurity GRC programs, policies, standards, and procedures.
- Conduct and coordinate cybersecurity risk assessments and compliance reviews.
- Establish and oversee the Cybersecurity Risk Management Program, including risk identification and assessment.
- Monitor compliance with internal policies and regulatory frameworks.
- Support internal and external cybersecurity audits.
- Perform third-party cyber risk assessments.
- Track and report Corrective and Preventive Actions (CAPA).
- Prepare periodic reports and metrics on cybersecurity status.
- Maintain cybersecurity awareness initiatives and training activities.
- Collaborate with IT and business units to support risk mitigation.
Experience & Qualifications:- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
- 4–6 years of experience in cybersecurity risk, governance, or compliance functions.
- Familiarity with cybersecurity frameworks (NCA ECC, ISO 27001, NIST).
- Experience with audits, risk assessments, and compliance tracking.
- Certifications such as CRISC, CISA, ISO 27001 LI/LA are a plus.
Core Competencies:- Strong analytical and documentation skills.
- Attention to detail and control effectiveness.
- Collaboration and coordination.
- Clear written and verbal communication.
- Continuous improvement mindset.