Global Cybersecurity GRC Manager📣 إعلان

About Foodics

Foodics is a leading restaurant management ecosystem and payment technology provider. Established in 2014, the company is headquartered in Riyadh, Saudi Arabia, with offices in five countries including UAE, Egypt, Jordan, and Kuwait. Foodics serves customers and partners in over 35 countries globally, having processed over 6 billion orders. The company has secured three rounds of funding, with the latest being a $170 million SaaS funding round in the MENA region, aimed at enhancing its innovation capabilities for business owners.

The Role: Global Cybersecurity GRC Manager

Foodics is seeking a Global Cybersecurity GRC Manager to join its team in Riyadh, Saudi Arabia. This full-time position involves managing and coordinating cybersecurity governance, risk, and compliance (GRC) activities across the Foodics Group, reporting directly to the CISO. The manager will be responsible for the daily operation of the GRC program, translating cybersecurity frameworks, regulatory obligations, and business risks into actionable controls, clear ownership, measurable remediation plans, and concise reporting. This is a cross-functional role requiring close collaboration with Cybersecurity, Technology, Product, Legal, Privacy, Internal Audit, and various business teams, while also supporting Foodics Pay cybersecurity compliance activities.

Key Responsibilities

• Manage and coordinate the group cybersecurity governance, risk, and compliance program, including daily GRC activities, priorities, operating cadence, and continuous improvement initiatives.
• Conduct, coordinate, and track gap assessments against ISO 27001, SOC 2, NCA ECC, SAMA CSF, KSA PDPL, and other applicable cybersecurity, privacy, regulatory, and contractual requirements.
• Translate regulatory and framework requirements into practical controls, implementation actions, accountable owners, target dates, and measurable evidence requirements.
• Maintain the cybersecurity policy framework, including policies, standards, procedures, control owners, supporting evidence, review cycles, approved exceptions, and related governance records.
• Own and maintain the cybersecurity risk register, facilitate risk assessments, and drive follow-up on treatment plans, risk acceptance, and overdue actions with business and technology owners.
• Monitor control implementation and remediation progress, challenge weak or incomplete responses, and escalate material risks, recurring gaps, and overdue actions when necessary.
• Coordinate internal audits, external audits, customer cybersecurity due diligence, certification activities, and readiness assessments.
• Support Foodics Pay cybersecurity compliance activities, including control mapping, evidence coordination, remediation tracking, audit support, and management reporting.
• Prepare cybersecurity GRC dashboards, KPIs, KRIs, risk summaries, compliance status reports, and materials for management and cybersecurity governance committees.
• Partner with control owners across various functions to embed cybersecurity requirements into business processes and initiatives.
• Maintain a clear compliance calendar, ensuring recurring assessments, reviews, evidence collection, policy updates, risk reviews, and audit commitments are completed within agreed timelines.
• Improve the efficiency and quality of the GRC program through standardized templates, control libraries, automation, tooling, and stronger evidence-management practices.

Required Qualifications and Experience

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, or a related discipline, or equivalent relevant professional experience.
• Over 10 years of professional experience in cybersecurity governance, risk, compliance, audit, or a closely related field.
• Demonstrated experience managing enterprise GRC activities and working with senior cybersecurity leadership.
• Strong hands-on knowledge of ISO 27001 and SOC 2, with practical experience in conducting gap assessments, mapping controls, collecting evidence, and driving remediation to closure.
• Good working knowledge of Saudi cybersecurity and privacy requirements, particularly NCA ECC and KSA PDPL, with the ability to interpret requirements and translate them into actionable controls.
• Demonstrated experience owning or managing cybersecurity risk registers, risk assessments, treatment plans, risk acceptance, exceptions, and management escalation.
• Experience maintaining cybersecurity policies, standards, procedures, control libraries, control ownership, evidence repositories, and compliance documentation.
• Proven ability to coordinate internal and external audits, manage evidence requests, respond to customer security assessments, and support certification or assurance readiness.

Essential Skills and Attributes

• Strong analytical skills with the ability to transform complex risk and compliance information into clear dashboards, executive summaries, and decision-ready committee reporting.
• Effective stakeholder management skills, including the confidence to constructively challenge control owners, drive accountability, and ensure actions are completed.
• Strong written and verbal communication skills in English.

Benefits

• Highly competitive compensation packages, including bonuses and potential for shares.
• Prioritization of personal development with regular training and an annual learning stipend.
• Opportunity to join a diverse team of over 30 nationalities working in 14 countries.
• Autonomy, mentoring, and challenging goals that foster professional growth.