Cybersecurity GRC Manager

About the role

We are seeking an experienced Cybersecurity GRC Manager to lead the governance, risk and compliance function for a major international football event in Saudi Arabia. The role carries end‑to‑end responsibility for cybersecurity policies, risk registers, third‑party assessments and data‑protection compliance throughout the event lifecycle.

Key responsibilities

• Own and lead the organization’s Cybersecurity Governance, Risk and Compliance (GRC) program end to end.
• Develop, maintain and secure executive approval for cybersecurity policies, standards, procedures and governance frameworks.
• Maintain the cybersecurity risk register, ensuring risks are identified, assessed, tracked and treated.
• Lead periodic and event‑driven cybersecurity risk assessments across technology, applications, vendors and event operations.
• Coordinate compliance self‑assessments, third‑party audits and regulator‑led audits.
• Manage third‑party and vendor cybersecurity risk assessments, due diligence and remediation tracking.
• Own the data‑protection compliance program and coordinate Data Processing Agreements with sponsors and vendors.
• Develop and manage the cybersecurity awareness and training program.

Required profile

• Minimum 3 years of experience in Cybersecurity GRC, information security risk or compliance.
• Proven track record of managing GRC programs, policies and risk registers.
• Strong documentation, reporting and stakeholder‑management skills.
• Ability to work with senior leadership, legal, procurement, IT and vendors.
• Knowledge of Saudi cybersecurity and data‑protection requirements is an advantage.

Required skills

• Cybersecurity risk assessments
• Data protection / privacy compliance
• Third‑party vendor cybersecurity risk management
• Cybersecurity policies and standards development
• Cybersecurity compliance frameworks (e.g., ISO 27001, NIST)
• Cybersecurity awareness and training program design