Senior Executive Manager Cybersecurity GRC & Data Protection📣 Job Ad

About the Role

Bupa Arabia is seeking a Senior Executive Manager - Cybersecurity GRC & Data Protection to lead the daily operations of its Cyber Security Governance, Risk & Compliance unit. This full-time position is based in Jeddah and is central to ensuring robust cybersecurity frameworks and data protection practices across the organization.

Key Responsibilities: Cybersecurity Governance

• Develop and maintain a comprehensive cybersecurity governance program.
• Document quality governance processes for Cyber initiatives, Business As Usual (BAU) operations, policies/standards, and contracts.
• Ensure processes are aligned with clear objectives and include defined oversight and review frequencies.
• Review and document RASCI (Responsible, Accountable, Consulted, Informed) matrices for all processes.
• Establish and ensure a continuous improvement cycle for all governance processes.
• Demonstrate and establish the value of the governance structure and processes within the organization.

Key Responsibilities: Risk Management and Compliance

• Design and implement an effective Cyber Security risk management process.
• Analyze current risks and identify potential risks that could affect Bupa Arabia.
• Evaluate the company’s previous handling of risks and compare potential risks against company criteria, including costs and legal requirements.
• Provide risk reporting tailored to the relevant audience, ensuring the board of directors is educated, business heads understand departmental risks, and individuals comprehend their accountability for specific risks.
• Explain external risks posed by Bupa Arabia to stakeholders.
• Design and implement a third-party risk operating model to identify, evaluate, and provide solutions for complex business and technology risks.
• Identify and address key third-party related risks and areas of concern associated with new and existing third-party relationships.
• Monitor Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for appropriate escalation to stakeholders.
• Develop a Third-Party Risk Management (TPRM) dashboard to highlight key program metrics and statistics, such as third-party portfolio risk, cyber security incidents, and program efficiencies.
• Maintain a comprehensive list of all legal and regulatory compliance requirements.
• Ensure periodic assessment of the efficiency of Cyber Security control systems and recommend effective improvements.
• Oversee the review and evaluation of Cyber Security procedures to identify hidden risks or common issues.
• Coordinate with various departments to review their respective compliance with Cyber Security Policies.
• Ensure the implementation of a program to perform periodic reviews on company procedures and processes.

Key Responsibilities: Data Protection

• Act as the Data Privacy Officer (DPO), ensuring Bupa Arabia processes personal data of staff, beneficiaries, providers, and other individuals in compliance with applicable KSA data privacy regulations.
• Identify personal data schemes and applicable privacy laws and regulations.
• Identify and analyze privacy risks relevant to the privacy ecosystem.
• Develop a data privacy mitigation plan to address identified privacy risks.
• Monitor the proper implementation of the mitigation plan in collaboration with other business units.
• Monitor compliance with the KSA Personal Data Protection Law (PDPL) and other data protection laws.
• Advise the Data Controller or Data Processor and their employees about their obligations to comply with the KSA PDPL and other data protection laws.

Candidate Profile

The ideal candidate will bring extensive experience in the field. Applicants must have over 10 years of relevant experience in cybersecurity governance, risk, compliance, and data protection management.

Work Setting

This is a full-time opportunity based in Jeddah, offering a pivotal role in strengthening Bupa Arabia's security posture.