Head of GRC & Security Architecture

Company Description

AFAQ AI is Oman’s pioneering AI-driven platform provider, specializing in advanced valuation and private markets analytics solutions. Our flagship product, AFAQ Value, empowers institutional investors including sovereign wealth funds, private equity and venture capital firms, family offices, and trillion dollar asset managers to value private assets faster, more consistently, and with superior auditability. We partner with global technology leaders to deliver secure, scalable AI applications tailored to the complex needs of financial services. Headquartered in Muscat, AFAQ AI is committed to driving innovation in private markets and supporting the GCC's vision for a technology-enabled financial ecosystem.

Role Description

AFAQ AI is seeking a Head of GRC & Security Architecture to own end-to-end security governance and audit readiness, while defining the security baseline for enterprise on-prem and hybrid deployments. This role will build the controls, policies, evidence, and technical guardrails required for SOC 2 compliance, strengthen AFAQ AI’s security standards across engineering and operations, and enable faster enterprise adoption through a credible customer assurance posture.

This is a high-impact role working directly with the CEO and product/engineering leadership to turn security into a scalable system without slowing delivery.

Qualifications

• 5+ years in information security with strong exposure to GRC + technical security.
• Proven SOC 2 experience (readiness or audit execution; Type I/Type II).
• Experience designing security for on-prem or hybrid enterprise deployments.
• Working knowledge of IAM/SSO, encryption, logging/monitoring, secure CI/CD, and vulnerability management.
• Strong writing and stakeholder skills (policies, controls, audit evidence, customer assurance).