General Opening Cybersecurity GRC

About the Role

NADEC Foods is seeking cybersecurity professionals to join its Governance, Risk, and Compliance (GRC) function in Riyadh, Saudi Arabia. This is a full-time position for individuals with 2-5 years of experience. Successful candidates will contribute to the organization’s cybersecurity objectives by strengthening governance, managing cybersecurity risks, and ensuring regulatory compliance.

Role Purpose

The primary purpose of this role is to enhance the organization's cybersecurity posture through effective GRC practices. This involves continuous improvement of controls, policies, processes, and reporting. The scope and level of responsibility will be determined based on the candidate’s qualifications and experience.

Key Responsibilities

• Support or lead the implementation and maintenance of the cybersecurity governance framework, including defining roles, responsibilities, oversight mechanisms, and management reporting.
• Identify, assess, monitor, treat, and escalate cybersecurity risks using practical risk analysis and scoring approaches.
• Monitor compliance with applicable National Cybersecurity Authority requirements, regulatory obligations, internal policies, and recognized frameworks.
• Develop, review, and maintain cybersecurity policies, standards, procedures, control documentation, records, and supporting evidence.
• Support cybersecurity audits, assessments, regulatory-readiness activities, remediation plans, and the closure of findings or control gaps.
• Prepare reports and presentations on cybersecurity posture, risks, compliance status, and improvement priorities.
• Collaborate with Cybersecurity, IT, business, risk, compliance, internal audit, consultants, and service providers to achieve effective GRC outcomes.
• Promote secure practices, accountability, continuous improvement, and effective stakeholder communication across the organization.
• Coordinate GRC initiatives, resources, vendors, project risks, and team deliverables, depending on seniority.

Required Experience

• Candidates should possess 2-5 years of experience in cybersecurity, specifically within Governance, Risk, and Compliance (GRC) functions.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role involves collaboration with various internal departments and external stakeholders to achieve cybersecurity objectives.

Application Process

We invite qualified cybersecurity professionals to apply for this general opening within our GRC team. Salary details will be discussed during the interview process.