IT GRC Manager

Responsibilities

• Lead IT compliance gap assessments against Saudi NCA ECC, PDPL, and CMA standards
• Maintain IT controls evidence for IPO audits and collaborate with auditors, legal, and finance teams
• Enforce IT policies across 150+ locations and manage the IT risk register
• Coordinate governance reviews with CIO and CISO to align policies with security and business goals
• Conduct annual and ad-hoc IT risk assessments and monitor vendor risks
• Oversee IT audits, prepare evidence, track findings, and ensure timely remediation

Requirements

• 5+ years in IT GRC, audit, or security compliance
• Strong knowledge of Saudi NCA ECC and PDPL compliance
• Experience with cloud platforms (AWS, GCP) from a controls and compliance perspective
• Experience managing IT governance across multi-site or multi-country environments
• Mandatory fluency in both Arabic and English
• Certification in at least one of the following: CISA, CRISC, or ISO 27001 Lead Auditor/Implementer

Preferred Qualifications

• Experience in IPO, M&A, or regulatory listings
• Familiarity with ISO 27001, NIST CSF, COBIT, and SOC 2 frameworks

About the Company

At Ninja, we are passionate about creating user-friendly and visually stunning web applications that push the boundaries in design and innovation.