IT GRC Manager

IT GRC Manager - Shape the Future with Ninja

Join Ninja, a trailblazer in crafting user-centric and visually striking web applications, as we redefine design and innovation. We are seeking an accomplished IT GRC Manager to fortify our Governance, Risk, and Compliance framework.

• IPO & Regulatory Compliance: Lead IT compliance gap assessments against Saudi NCA ECC, PDPL, and CMA standards. Maintain IT controls evidence for IPO audits and collaborate with auditors, legal, and finance teams to ensure compliance and timely gap closure.
• Governance & Policy: Enforce IT policies across 150+ locations, manage IT risk register, and coordinate governance reviews with CIO and CISO to align policies with security and business goals.
• Risk Management: Conduct annual and ad-hoc IT risk assessments, set risk appetites, monitor vendor risks, and implement mitigation strategies to safeguard IT assets.
• Audit & Assurance: Oversee IT audits, prepare evidence, track findings, ensure timely remediation, and report progress to the CIO.

To thrive in this role, you'll bring a minimum of 5 years in IT GRC, audit, or security compliance, with preferred experience in IPO, M&A, or regulatory listings. Proficiency in Saudi NCA ECC and PDPL compliance is essential. Experience with cloud platforms (AWS, GCP) from a controls and compliance perspective is a plus. Proven ability to manage IT governance across multi-site or multi-country environments is required. Certifications such as CISA (preferred), CRISC, or ISO 27001 Lead Auditor/Implementer are mandatory. Fluency in both Arabic and English is a must.

If you're a strategic thinker with a deep understanding of ISO 27001, NIST CSF, COBIT, and SOC 2 frameworks, and possess exceptional written communication skills, we invite you to apply. Your ability to convert regulatory requirements into effective IT controls will be invaluable in this role.