Head of Cybersecurity Governance, Risk, and Compliance

NEOM is an innovative vision for future living, situated in northwest Saudi Arabia along the Red Sea. The project aims to create hyperconnected, cognitive cities alongside various advanced facilities such as ports, infrastructure, and recreational venues. The Head of Cybersecurity Governance, Risk, and Compliance will oversee the cybersecurity activities associated with governance, risk management, compliance, policies, and procedures. This role is critical in aligning NEOM's cybersecurity strategy with its business objectives while ensuring adherence to laws and regulations.

Key Responsibilities:

• Direct and manage cybersecurity GRC processes and ensure alignment with organizational and subsidiary strategies.
• Raise awareness of cybersecurity risks across departments and integrate risk management into project designs.
• Build and maintain a high-performance team, focusing on professional development and effective communication.
• Lead the development and maintenance of cybersecurity policies aligning with national and international standards.
• Monitor and ensure compliance with cybersecurity regulations and perform periodic reviews and audits.
• Oversee third-party cybersecurity risk management and ensure effective communication during incidents.
• Manage cybersecurity human resources and ensure compliance throughout the employee lifecycle.

Background, Skills & Qualifications:

• Experience: 12+ years in information security or IT, with 7+ years in a management role overseeing strategic cybersecurity planning.
• Knowledge: Strong understanding of cybersecurity principles, compliance standards, risk assessment methodologies, and security frameworks.
• Skills: Excellent communication and leadership skills, proficient in budgeting and resource management.
• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field (required); Master’s degree highly preferred.
• Certifications: Required certifications include CRISC, CISA, CISM, or CGEIT. Preferred certifications include CISSP, PMP, and ISO certifications.

Work Conditions: On-site, Full-time.