
Foodics
Head of Risk and Cyber Security
- Permanent
- Riyadh, Saudi Arabia
- Experience 10 - 15 yrs
Job expiry date: 17/10/2026
Job overview
Date posted
02/09/2026
Location
Riyadh, Saudi Arabia
Salary
SAR 40,000 - 50,000 per month
Compensation
Comprehensive package + relocation
Experience
10 - 15 yrs
Seniority
Director
Qualification
Bachelors degree
Expiration date
17/10/2026
Job description
This Head of Risk and Cyber Security role reports into senior leadership and the board as the primary advisor on risk posture and security strategy at Foodics, a restaurant management platform and payment technology company processing over 6 billion orders across more than 35 countries. The position owns establishing, leading, and maturing the organization's enterprise risk management and information and cyber security functions in equal measure. You will design and maintain the ERM framework, risk appetite statement, and risk registers, leading periodic risk assessments across business units and consolidating findings into board and ERM committee reporting. Emerging operational, strategic, financial, regulatory, and reputational risks get identified early, with mitigation planning driven alongside process owners. Business continuity and disaster recovery planning sit under direct ownership, alongside risk based input that supports internal audit and compliance functions. Information security strategy, policies, and controls get developed and executed, with threat detection, vulnerability management, incident response, and penetration testing programs all overseen directly. Cyber incident response planning runs through this role too, acting as incident commander during security events and ensuring compliance with data protection regulations and industry certifications. The risk and security team gets built, led, and developed, with regular posture updates presented to executive leadership and the board or risk committee.
Required skills
Key responsibilities
- Design and maintain the organization's ERM framework, risk appetite statement, and risk registers
- Lead periodic risk assessments across business units and consolidate findings into board and ERM committee reporting, including KRIs and KPIs
- Identify emerging operational, strategic, financial, regulatory, and reputational risks and drive mitigation planning with process owners
- Own business continuity and disaster recovery planning
- Support internal audit and compliance functions with risk based input
- Develop and execute the information security strategy, policies, and controls
- Oversee security operations including threat detection, vulnerability management, incident response, and penetration testing programs
- Direct cyber incident response planning and act as incident commander during security events
- Ensure compliance with data protection regulations and industry certifications
- Manage security awareness training programs across the organization
- Build, lead, and develop the risk and security team
- Present regular risk and security posture updates to executive leadership and the board or risk committee
Experience & skills
- Hold a bachelor's degree in information security, risk management, computer science, or a related field; a master's degree is preferred
- Bring 10+ years of experience in risk management and/or cybersecurity, including 5+ years in a leadership role
- Carry certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent
- Show strong knowledge of regulatory frameworks relevant to the industry and region
- Demonstrate proven experience building risk frameworks and security programs from the ground up or scaling existing ones
- Apply excellent stakeholder management and board level communication skills
- Communicate fluently in English, with strong written and verbal skills