GRC Director – Governance, Risk & Compliance Leader

About the role

The organization is seeking a senior GRC Director to shape and execute its Governance, Risk, and Compliance strategy. This leader will drive continuous improvement, embed a risk‑aware culture, and ensure alignment with regulatory requirements.

Key responsibilities

• Develop and implement the overall GRC strategy and define performance metrics.
• Establish and maintain governance frameworks, policies, and procedures; lead compliance assessments and audits.
• Design and oversee enterprise risk management processes, conduct risk assessments, and monitor treatment plans.
• Promote governance, risk, and compliance awareness through training programs.
• Collaborate with executive leadership, Legal, IT, Operations, and regulators; present reports to senior management.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, IT, Business Administration or related field; Master’s preferred.
• Minimum 10 years of GRC experience, with at least 5 years in a leadership role.
• Proven track record implementing enterprise GRC frameworks, preferably in cybersecurity consulting or technology firms.
• Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer/Auditor, CGEIT.
• Strong leadership, communication, and strategic decision‑making abilities.

Required skills

• Enterprise Risk Management
• Governance Frameworks
• Regulatory Compliance
• ISO/IEC 27001
• NCA ECC
• SAMA Cybersecurity Framework
• Risk Assessments
• Policy Development
• Internal & External Audits
• Executive Reporting