Senior Cyber Security Manager

Location

We are seeking a highly skilled and experienced Saudi national to join our team as a Cyber Security Senior Manager. In this leadership role, the candidate will be responsible for ensuring overall accountability for compliance with cybersecurity requirements, regulations, and laws set by the Saudi Arabian Monetary Authority (SAMA) and other governing bodies in KSA.

The position involves overseeing operational security, supporting client onboarding initiatives, and conducting security due diligence to respond to client and bank security questionnaires.

Responsibilities:

1. Regulatory Compliance:
   • Overall Accountability: Serve as the primary accountable authority for compliance with cybersecurity frameworks, including SAMA Cyber Security Framework (CSF), National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC), Cyber Resilience Framework (CRFR), and Minimum Verification Controls (MVC).
   • Operational Security: Implement and oversee operational security measures to ensure compliance with regulatory requirements.
   • Policy Adherence: Ensure cybersecurity policies align with regulatory frameworks and oversee their effective implementation.
2. Client Onboarding:
   • Support Framework: Maintain a robust cybersecurity support framework for client onboarding, ensuring alignment with regulatory and organizational requirements.
   • Risk Assessment: Conduct cybersecurity risk assessments as part of the client onboarding process.
   • Client Education: Collaborate with clients to educate them on cybersecurity requirements, facilitating a smooth onboarding experience.
3. Security Due Diligence:
   • Questionnaire Response: Lead the response to security questionnaires from clients and partner banks, ensuring accurate and detailed answers.
   • Documentation: Compile and maintain documentation related to security controls and practices for sharing with clients during due diligence processes.
   • Continuous Improvement: Work towards enhancing and streamlining the security due diligence process based on client feedback and evolving security standards.
4. Stakeholder Management:
   • Communication: Effectively communicate cybersecurity compliance requirements to internal and external stakeholders, fostering a culture of awareness and adherence.
   • Collaboration: Collaborate with cross-functional teams, including legal, risk management, and client services, to align cybersecurity initiatives with organizational goals.
   • Client Engagement: Establish and maintain strong relationships with clients, providing cybersecurity guidance and support during onboarding and due diligence processes.

Qualifications:

• Saudi national with a minimum of 8 years of proven experience in a cybersecurity management role.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field. Master's degree preferred.
• Professional certifications such as CISSP, CISM, or CISA are highly desirable.
• In-depth knowledge of SAMA CSF, NCA ECC, CRFR, MVC, and other KSA cybersecurity regulations.
• Strong understanding of operational security practices and their application in a corporate environment.

Skills and Competencies:

• Strong leadership and strategic planning skills.
• Excellent communication and interpersonal skills, especially in client-facing scenarios.
• Analytical mindset with the ability to translate regulatory requirements into actionable strategies.
• Experience in managing cybersecurity compliance programs in the financial sector, with a focus on client onboarding and due diligence.
• Ability to adapt to a dynamic regulatory environment and lead the organization through evolving compliance challenges.

If you are a qualified Saudi cybersecurity professional with a passion for regulatory compliance, client onboarding, and security due diligence, we invite you to apply and contribute to the cybersecurity resilience of our organization in the Kingdom of Saudi Arabia.