Cybersecurity Governance, Risk, Compliance and Privacy Senior Manager

Riyadh Air is the new national airline focused on transforming Saudi Arabia into a global aviation hub. We are seeking an experienced and meticulous Cybersecurity Governance, Risk, and Compliance (GRC) and Privacy professional. In this role, you will have the opportunity to lead, oversee, and implement Cybersecurity GRC and Privacy best practices and controls that align with regulatory requirements and industry standards.

Your responsibilities will include the development, implementation, and continuous improvement of cybersecurity strategies, risk management frameworks, and privacy policies to protect the organization’s data, assets, and reputation. You will manage internal and external audits, such as vulnerability assessments and penetration testing, in collaboration with the centralized audit team. Key objectives will be to ensure compliance with Saudi Arabia's National Cybersecurity Authority and to establish the Data Privacy function. This is an opportunity to drive trust, resilience, and compliance in a rapidly evolving digital landscape.

You should possess a degree and a minimum of 10 years of experience managing Cybersecurity GRC functions in large complex organizations. An in-depth understanding of regulatory compliance requirements and experience designing associated policies and procedures (NCA, ISO 27001, NIST, PCI DSS, GDPR, etc.) is essential. Experience in delivering IT and OT risk assessments is highly desirable.

Please submit your application to join us in shaping the future of air travel at Riyadh Air.

Location: Riyadh Region, Saudi Arabia (On-site)

Work Conditions: Full-time