Global Cybersecurity GRC Manager

About the role

Foodics, a restaurant management ecosystem and payment technology provider founded in 2014 and headquartered in Riyadh, is looking for a Global Cybersecurity GRC Manager. The role manages and coordinates cybersecurity governance, risk and compliance (GRC) activities across the Foodics Group under the direction of the CISO, turning frameworks, regulations and business risks into practical controls, clear ownership, measurable remediation plans and decision-ready reporting. It is a high-visibility, cross-functional role working with Cybersecurity, Technology, Product, Legal, Privacy, Internal Audit and business teams, and supporting Foodics Pay compliance where required.

Key responsibilities

• Manage and coordinate the group GRC program, including day-to-day activities, priorities, cadence and continuous improvement.
• Conduct and track gap assessments against ISO 27001, SOC 2, NCA ECC, SAMA CSF, KSA PDPL and other requirements.
• Translate regulatory and framework requirements into controls, owners, target dates and evidence requirements.
• Maintain the cybersecurity policy framework, standards, procedures, control owners, evidence and approved exceptions.
• Own the cybersecurity risk register, facilitate risk assessments and follow up on treatment plans and overdue actions.
• Monitor control implementation and remediation, escalate material risks and recurring gaps, and coordinate internal and external audits, customer due diligence and certification readiness.
• Support compliance activities such as control mapping, evidence coordination, remediation tracking and management reporting.
• Prepare GRC dashboards, KPIs, KRIs, risk summaries and compliance reports for management and governance committees.
• Partner with control owners across functions to embed cybersecurity requirements into business processes, keep a compliance calendar and improve the program with templates, control libraries, automation and tooling.

Required profile

• 10+ years of experience in cybersecurity GRC, audit or a closely related field, managing enterprise GRC with senior cybersecurity leadership.
• Bachelor's degree in Cybersecurity, Information Security, IT, Computer Science, Risk Management or a related discipline, or equivalent experience.
• Nice to have: FinTech, payments or SaaS experience; SAMA cybersecurity experience; Arabic language skills.

Required skills

• Strong hands-on knowledge of ISO 27001 and SOC 2, including gap assessments and evidence collection.
• Good working knowledge of NCA ECC and KSA PDPL.
• Experience with risk registers, risk assessments, treatment plans and audit coordination.
• Ability to build dashboards, executive summaries and committee reports.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CRISC, CISA, CISSP are a plus.

What we offer

• Competitive compensation including bonuses and potential shares.
• Regular training and an annual learning stipend.
• A diverse team of over 30 nationalities in 14 countries, with autonomy, mentoring and challenging goals.