Manager – Cybersecurity GRC & Advisory

About the role

Axon Technologies is expanding its Cybersecurity Advisory team and seeks a Manager to lead GRC and advisory engagements across Saudi Arabia and the GCC. This client‑facing role combines deep governance, risk and compliance expertise with security architecture knowledge, providing direct advice to CISOs, architects and executive stakeholders.

Key responsibilities

• Deliver end‑to‑end cybersecurity advisory engagements, from mobilisation to client sign‑off.
• Act as a trusted virtual CISO for leading Saudi banks, real‑estate developers and engineering consultancies.
• Plan and run stakeholder interviews and workshops for business impact assessments, risk assessments and security architecture reviews.
• Develop cybersecurity strategies, roadmaps, risk registers and executive reporting.
• Assess security posture against NCA ECC/CSCC, SAMA CSF, ISO 27001, NIST and create remediation plans.
• Author and review SOC and threat‑intelligence policies, procedures, playbooks, runbooks, KPIs and operating‑model documentation.
• Contribute to enterprise security reference architectures aligned to SABSA and TOGAF.
• Design and deliver cybersecurity awareness programmes for client staff and leadership.
• Manage workplans, deliverable trackers, document request registers and client expectations across multiple engagements.
• Mentor junior consultants and improve delivery templates and accelerators.

Required profile

• 7‑12 years of cybersecurity experience, with at least 5 years in GRC or advisory consulting.
• Proven delivery of consulting engagements in Saudi Arabia or the wider GCC for government, financial‑services or critical‑infrastructure clients.
• Strong knowledge of regional and international regulations such as NCA ECC/CSCC, SAMA Cybersecurity Framework, ISO 27001 and NIST CSF/800‑53.
• Experience acting as virtual CISO, creating risk registers, roadmaps and board‑level reporting.
• Excellent technical writing and ability to produce polished Word, Excel and PowerPoint deliverables.
• CISSP or CISM certification and strong English communication skills.
• Willingness to travel regularly to Riyadh and work to the Saudi business week.

Required skills

• Security frameworks: NCA ECC/CSCC, SAMA CSF, ISO 27001, NIST CSF, TOGAF, SABSA.
• Governance, risk and compliance (GRC) methodologies and advisory consulting.
• Virtual CISO functions: risk registers, security roadmaps, executive reporting.
• SOC and threat‑intelligence operating model development.
• Security architecture documentation and review.
• Technical certifications: CISSP, CISM (additional certifications such as CRISC, CISA, PMP are desirable).

What we offer

• Senior, highly visible delivery role in a rapidly growing specialist consultancy.
• Immediate ownership of live engagements with tier‑one GCC clients.
• Direct exposure to CISO, chief‑architect and executive‑level stakeholders.
• Opportunity to shape and grow Axon's cybersecurity advisory practice across the GCC.
• Rapid career progression for high‑performing individuals.
• Competitive compensation with performance‑related upside.
• Flexible hybrid working model across GCC and Dubai.