Head Of Risk and Cyber Security

Role Overview

Head of Risk and Cyber Security at Foodics, a leading restaurant management ecosystem and payment tech provider headquartered in Riyadh with offices across 5 countries.

Company Overview

Foodics is a SaaS company founded in 2014, serving customers and partners in over 35 countries worldwide. The company has processed over 6 billion orders and has raised three rounds of funding, with the latest raising $170 million in the largest SaaS funding round in MENA. The organization has a talented team of over 30 nationalities working across 14 countries.

Role Purpose

The Head of Risk and Cyber Security establishes, leads, and matures the organization's enterprise risk management and information/cyber security functions. This role ensures the business identifies, assesses, and mitigates operational, financial, regulatory, and technology-related risks while safeguarding company and customer data against cyber threats, acting as the primary advisor to senior leadership and the board on risk posture and security strategy.

Key Responsibilities

Enterprise Risk Management

• Design and maintain the organization's ERM framework, risk appetite statement, and risk registers.
• Lead periodic risk assessments across business units and consolidate findings into board and ERM committee reporting, including KRIs and KPIs.
• Identify emerging risks across operational, strategic, financial, regulatory, and reputational categories and drive mitigation planning with process owners.
• Own business continuity and disaster recovery planning.
• Support internal audit and compliance functions with risk-based input.

Cyber & Information Security

• Develop and execute the information security strategy, policies, and controls.
• Oversee security operations including threat detection, vulnerability management, incident response, and penetration testing programs.
• Lead cyber incident response planning and act as incident commander during security events.
• Ensure compliance with data protection regulations and industry certifications.
• Manage security awareness training programs across the organization.

Leadership & Governance

• Build, lead, and develop the risk and security team.
• Present regular risk and security posture updates to executive leadership and the board or risk committee.
• Manage relationships with regulators, auditors, and external security partners.
• Own the risk and security budget, tooling, and roadmap.

Qualifications & Experience

• Bachelor's degree in information security, Risk Management, Computer Science, or related field; Master's degree preferred.
• 10+ years of experience in risk management and/or cybersecurity, with 5+ years in a leadership role.
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent.
• Strong knowledge of regulatory frameworks relevant to the industry and region.
• Proven experience building risk frameworks and security programs from the ground up or scaling existing ones.
• Excellent stakeholder management and board-level communication skills.
• Fluent in English, with strong written and verbal communication skills.

Skills & Competencies

• Strategic thinking with hands-on execution ability.
• Strong analytical and problem-solving skills.
• Crisis management and decision-making under pressure.
• Cross-functional influence without direct authority.

Additional Information

• Highly competitive compensation packages, including bonuses and the potential for shares.
• Regular training and an annual learning stipend for personal development and career growth in a hyper-growth environment.
• Autonomy, mentoring, and challenging goals that create opportunities for both individual and company growth.