Senior Compliance Manager

Next Era looking for a dynamic resources in Cyber Compliance role.

Department: Corporate IT – Cyber Security

Reporting To: Group CISO / Cyber Security Leadership Team

We are seeking an experienced Senior Manager – Cyber Compliance to lead and manage cybersecurity governance, risk, and compliance (GRC) initiatives across Middle East and European operations. The ideal candidate will possess strong expertise in cybersecurity regulations, information security standards, audit management, and compliance frameworks while driving cyber resilience and regulatory adherence across the organization.

This role will be responsible for ensuring compliance with regional and international cyber regulations, operationalizing cybersecurity governance programs, managing control remediation activities, and supporting security requirements for strategic business initiatives and customer engagements.

• Ensure compliance with cybersecurity regulations applicable across the Middle East and European regions.
• Manage and maintain compliance with standards including ISO 27001, ISO/IEC 27701, GDPR, Saudi Personal Data Protection Law (PDPL), and other relevant frameworks.
• Monitor evolving cyber regulatory requirements and ensure timely implementation of compliance controls.
• Drive cybersecurity governance programs and compliance reporting across multiple business units.
• Plan, coordinate, and execute internal cybersecurity audits and compliance assessments.
• Identify compliance gaps, risks, and control deficiencies, and develop remediation plans.
• Track remediation activities and collaborate with stakeholders to ensure timely closure of findings.
• Facilitate external audits, certification audits, and regulatory reviews.

• Operationalize and manage enterprise Governance, Risk & Compliance (GRC) initiatives.
• Establish governance frameworks, policies, procedures, and controls aligned with industry standards.
• Support risk assessments, control evaluations, and compliance monitoring activities.
• Drive continuous improvements in governance processes and compliance monitoring mechanisms.

• Maintain oversight on emerging cyber threats and regulatory developments impacting business operations.
• Work closely with cybersecurity operations teams to ensure effectiveness of security controls.
• Guide teams on implementing preventive, detective, and corrective controls.
• Support compliance requirements associated with EDR, DLP, SIEM, SOC, PIM, IRM, and related security technologies.

• Support cybersecurity requirements for customer RFPs, bids, and contractual compliance obligations.
• Act as a trusted advisor for projects requiring regulatory and compliance guidance.
• Engage with senior stakeholders and business leaders on governance and compliance matters.
• Promote cybersecurity awareness and compliance culture across the organization.
• Evaluate and implement automation opportunities within audit, compliance, and GRC processes.
• Leverage technology solutions to enhance compliance monitoring and reporting capabilities.
• Develop dashboards, KPIs, and executive reporting metrics to measure compliance effectiveness.

Education

• Bachelor's Degree in Cyber Security, Information Security, Information Technology, Computer Science, or a related discipline.

Experience

• Minimum 10 years of hands‑on experience in information security audits, governance, risk, and compliance.
• Experience managing cybersecurity compliance programs across multiple geographies.
• Proven track record in internal and external audit management.
• Experience working with enterprise cybersecurity governance frameworks.

• ISO 27001
• ISO/IEC 27701
• NIST Cybersecurity Framework
• GDPR / Data Privacy Regulations
• Information Security Governance Frameworks

• Security Information and Event Management (SIEM)
• Security Operations Center (SOC)
• Privileged Identity Management (PIM)
• Information Rights Management (IRM)