Dear All,
NextEra looking for a dynamic resources in Cyber Compliance role.
Senior Manager – Cyber Compliance (GRC)
Location: Riyadh, Saudi Arabia
Department: Corporate IT – Cyber Security
Reporting To: Group CISO / Cyber Security Leadership Team
Role Overview
We are seeking an experienced Senior Manager – Cyber Compliance to lead and manage cybersecurity governance, risk, and compliance (GRC) initiatives across Middle East and European operations. The ideal candidate will possess strong expertise in cybersecurity regulations, information security standards, audit management, and compliance frameworks while driving cyber resilience and regulatory adherence across the organization.
This role will be responsible for ensuring compliance with regional and international cyber regulations, operationalizing cybersecurity governance programs, managing control remediation activities, and supporting security requirements for strategic business initiatives and customer engagements.
Key Responsibilities
Cyber Governance & Regulatory Compliance
- Ensure compliance with cybersecurity regulations applicable across the Middle East and European regions.
- Manage and maintain compliance with standards including ISO 27001, ISO/IEC 27701, GDPR, Saudi Personal Data Protection Law (PDPL), and other relevant frameworks.
- Monitor evolving cyber regulatory requirements and ensure timely implementation of compliance controls.
- Drive cybersecurity governance programs and compliance reporting across multiple business units.
Audit & Risk Management
- Plan, coordinate, and execute internal cybersecurity audits and compliance assessments.
- Identify compliance gaps, risks, and control deficiencies, and develop remediation plans.
- Track remediation activities and collaborate with stakeholders to ensure timely closure of findings.
- Facilitate external audits, certification audits, and regulatory reviews.
GRC Program Management
- Operationalize and manage enterprise Governance, Risk & Compliance (GRC) initiatives.
- Establish governance frameworks, policies, procedures, and controls aligned with industry standards.
- Support risk assessments, control evaluations, and compliance monitoring activities.
- Drive continuous improvements in governance processes and compliance monitoring mechanisms.
Security Oversight & Control Effectiveness
- Maintain oversight on emerging cyber threats and regulatory developments impacting business operations.
- Work closely with cybersecurity operations teams to ensure effectiveness of security controls.
- Guide teams on implementing preventive, detective, and corrective controls.
- Support compliance requirements associated with EDR, DLP, SIEM, SOC, PIM, IRM, and related security technologies.
Business & Customer Support
- Support cybersecurity requirements for customer RFPs, bids, and contractual compliance obligations.
- Act as a trusted advisor for projects requiring regulatory and compliance guidance.
- Engage with senior stakeholders and business leaders on governance and compliance matters.
- Promote cybersecurity awareness and compliance culture across the organization.
Automation & Continuous Improvement
- Evaluate and implement automation opportunities within audit, compliance, and GRC processes.
- Leverage technology solutions to enhance compliance monitoring and reporting capabilities.
- Develop dashboards, KPIs, and executive reporting metrics to measure compliance effectiveness.
Required Qualifications
Education
- Bachelor's Degree in Cyber Security, Information Security, Information Technology, Computer Science, or a related discipline.
Experience
- Minimum 10 years of hands-on experience in information security audits, governance, risk, and compliance.
- Experience managing cybersecurity compliance programs across multiple geographies.
- Proven track record in internal and external audit management.
- Experience working with enterprise cybersecurity governance frameworks.
Required Technical Skills
Security Standards & Frameworks
- ISO 27001
- ISO/IEC 27701
- NIST Cybersecurity Framework
- GDPR / Data Privacy Regulations
- Saudi Personal Data Protection Law (PDPL)
- Information Security Governance Frameworks
Security Technologies (Awareness & Compliance Perspective)
- Security Information and Event Management (SIEM)
- Security Operations Center (SOC)
- Endpoint Detection & Response (EDR)
- Data Loss Prevention (DLP)
- Privileged Identity Management (PIM)
- Information Rights Management (IRM)
Compliance & Audit
- Internal Audit Management
- Regulatory Compliance Assessment
- Risk Management
- Control Testing & Validation
- Compliance Reporting
- Gap Assessment & Remediation Tracking
Certifications (Preferred)
Candidates holding one or more of the following certifications will be highly preferred:
- CISA (Certified Information Systems Auditor)
- ISO 27001 Lead Auditor
- IAPP (International Association of Privacy Professionals)
- CISSP (Preferred)
- CRISC (Preferred)
- ISO 27001 Lead Implementer (Preferred)
Key Competencies
- Strong written and verbal communication skills.
- Excellent stakeholder management and presentation abilities.
- Self-motivated and proactive problem solver.
- Strong analytical and risk assessment skills.
- Ability to work independently and lead compliance initiatives.
- Familiarity with Middle East and European business and regulatory environments.
- Strong documentation, reporting, and governance capabilities.
- Ability to influence cross-functional teams and senior leadership.
Preferred Candidate Profile
- Experience working in large enterprises, consulting organizations, or regulated industries.
- Deep understanding of cybersecurity governance within Middle East markets.
- Exposure to regulatory compliance across multinational organizations.
- Ability to manage multiple compliance initiatives simultaneously while maintaining operational excellence.
