Manager - Cyber Security GRC Operations

As the Manager of Cyber Security Governance, Risk, and Compliance (GRC) Operations at Bupa Arabia, you will be responsible for managing the Cyber Security initiatives within the company. Your role will encompass three main areas:

1. Ready to apply for roles like this?

   Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.

   Unlock employer & apply directly

   Cyber Security Governance:

   • Develop and document comprehensive governance processes for Cyber initiatives, business-as-usual operations, policies, standards, contracts, and more.
   • Ensure that these processes align with clear objectives and include regular oversight and review.
   • Implement a continuous improvement cycle for existing processes.

2. Cyber Security Risk Management:

   • Design and implement a risk management process focused on Cyber Security.
   • Analyze current risks and identify potential threats to the company.
   • Evaluate how risks are currently managed and compare them against the established criteria, such as costs and legal requirements.
   • Educate management on significant risks affecting the business, ensuring accountability across departments.

3. Compliance Management:

   • Oversee legal and regulatory compliance requirements related to Cyber Security.
   • Conduct periodic assessments of the effectiveness of Cyber Security control systems and recommend improvements as needed.
   • Review Cyber Security procedures to identify potential risks or common issues, coordinating with internal departments for compliance with policies.
   • Implement programs for periodic reviews of company procedures and processes.

Skills Required:

• Proficiency in local regulations such as SAMA and NCA frameworks and standards.
• Experience in developing and executing complex Cyber Security programs.
• Strong knowledge of security concepts (e.g., cyber-attacks, threat vectors, risk management, incident management).
• Familiarity with various operating systems (Windows, Linux, Unix) and applications/databases to address security threats.
• Excellent skills in report preparation, dashboards, and documentation.
• Strong communication and leadership abilities.
• Experience in vendor management and handling high-pressure situations with key stakeholders.
• Good analytical, problem-solving, and interpersonal skills.

Language Requirements:

• Proficiency in English is required; knowledge of Arabic may be advantageous.