Cybersecurity GRC Manager

About HALA

HALA is a prominent fintech company operating in the MENAP region, dedicated to transforming financial services and establishing the future of banking for SMEs. Our mission is to empower small and medium enterprises to start, run, and expand their businesses by providing innovative financial and technological solutions. Since our founding in 2017, and licensed by the Saudi Arabian Central Bank, HALA currently operates multiple entities across the UAE, Saudi Arabia, and Egypt, including HALA Payments and HALA Logistics, offering merchants tools to digitize payments and oversee sales and operations.

Key Responsibilities

• Develop, implement, and refine the company's Information Security Governance framework, including policies, standards, and procedures.
• Lead and execute the Cyber Security Strategy aligned with business objectives.
• Provide regular cybersecurity status updates to the Board of Directors and executive management.
• Establish and oversee security metrics and KPIs to assess the efficacy of the security program.
• Manage the cybersecurity budget ensuring optimal allocation of resources to mitigate risks.
• Design and administer a comprehensive enterprise-wide Cyber Security Risk Management program.
• Perform routine risk assessments such as Business Impact Analysis to identify and evaluate security risks.
• Coordinate risk treatment planning with stakeholders to implement mitigation, acceptance, or transfer strategies.
• Administer vendor risk management evaluating the security postures of third-party vendors, including cloud service providers and payment gateways.
• Integrate risk management practices into Software Development Life Cycle (SDLC) and change management procedures.
• Serve as the principal contact and expert for cybersecurity regulatory audits and examinations (e.g., SAMA, CMA).
• Ensure ongoing compliance with regulatory frameworks like SAMA's Cyber Security Framework (CSF) and PCI DSS standards.
• Manage procurement and upkeep of regulatory licenses and certifications from a cybersecurity standpoint.
• Prepare and submit required regulatory reports, questionnaires, and evidence efficiently and accurately.
• Monitor evolving regulatory requirements and advise the business accordingly.
• Lead and coordinate internal and external security audits, including evidence preparation and remediation tracking.
• Develop a thorough control testing program to validate security control effectiveness.
• Oversee remediation actions to close out audit and assessment findings permanently.
• Create and implement security awareness and training programs customized by organizational role, with emphasis on relevant local security threats.
• Promote a security-conscious culture ensuring all employees understand their role in safeguarding company's data assets.

What HALA Offers

• An inclusive, diverse work environment encouraging innovation and flexible working arrangements including remote, in-office, and hybrid models.
• Highly competitive salary packages with options for equity participation.
• Commitment to personal and professional growth through regular training and an annual learning stipend.
• Opportunity to work with a culturally rich team representing over 30 nationalities across seven countries, gaining significant industry experience.
• Autonomy coupled with mentorship and challenging objectives fostering substantial career development opportunities.
• Substantial responsibility and trust placed on individuals to direct their functions independently to achieve optimal outcomes.