Cybersecurity GRC Manager📣 Job Ad

About J-B and the Role

J-B, a SAMA-regulated financing company, is seeking a Cybersecurity GRC Manager to join its team in Riyadh, Saudi Arabia. This full-time position is central to maintaining the organization's robust cybersecurity posture and ensuring compliance within a dynamic regulatory landscape.

Role Overview

The Cybersecurity GRC Manager will lead the day-to-day execution of the organization’s cybersecurity governance, risk, and compliance (GRC) program. This role involves managing a dedicated team of GRC analysts/officers, maintaining the risk register, and providing clear reporting on the organization’s risk and compliance posture to senior leadership. The Manager will drive risk assessments, oversee the cybersecurity controls framework, and ensure full alignment with SAMA Cyber Security Framework (CSF) requirements and other applicable regulations, reporting directly to the Chief of Cybersecurity.

Key Responsibilities

• Ensure the cybersecurity GRC program remains fully compliant with SAMA Cyber Security Framework (CSF) requirements, including periodic self-assessments and regulatory reporting.
• Execute and continuously improve the organization’s cybersecurity governance policies, procedures, and standards, aligned with SAMA requirements, industry best practices, and business objectives.
• Lead enterprise-wide risk assessments and gap analyses; maintain the risk register and present findings/remediation plans to senior leadership.
• Oversee the monitoring and continuous improvement of the cybersecurity controls framework across the organization.
• Partner with stakeholders across IT, legal, audit, and business units to embed cybersecurity risk management into operational decisions.
• Lead, mentor, and develop a team of GRC analysts/officers; manage workload, performance, and professional growth.
• Serve as a subject-matter expert on cybersecurity GRC and SAMA compliance, providing risk and compliance reporting to senior leadership.
• Manage the cybersecurity awareness and training program; drive organization-wide adoption.
• Coordinate cybersecurity incident response governance, including cross-functional response coordination, post-incident review, and reporting to leadership, with regulatory notification where required by SAMA.
• Manage day-to-day relationships with SAMA, external auditors, and third-party assessors; oversee audit readiness and remediation tracking.
• Monitor the regulatory and threat landscape, translating emerging requirements into program-level recommendations.
• Support GRC tooling evaluation and vendor coordination (GRC platforms, SIEM, vulnerability management, etc.).

Qualifications and Experience

• A minimum of 5-10 years of experience in cybersecurity governance, risk, and compliance, preferably within a SAMA-regulated financial institution.
• Demonstrated leadership experience in managing and developing a team of GRC professionals.
• In-depth knowledge and practical experience with the SAMA Cyber Security Framework (CSF) and other relevant regulations.
• Proven ability to lead enterprise-wide risk assessments and manage cybersecurity controls frameworks.
• Strong communication and stakeholder management skills to effectively partner across various business units and external entities.

Reporting Structure and Team

This position reports directly to the Chief of Cybersecurity. The manager will be responsible for leading, mentoring, and developing a team of GRC analysts/officers, overseeing their workload and professional growth within the cybersecurity department.

Application Process

Candidates who meet the specified qualifications are encouraged to apply for this critical role at J-B.