The Senior Manager - Cybersecurity Risk is responsible for managing and overseeing the organization’s information security risk management framework. This role ensures that security risks are identified, assessed, mitigated, and reported in alignment with regulatory requirements, business objectives, and industry best practices. The individual will also support incident management, policy development, and compliance initiatives to strengthen the organization’s security posture.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time
Responsibilities:
- Effectively communicate cybersecurity risks and posture to senior management.
- Develop security risk profiles of computer systems by assessing threats and vulnerabilities.
- Develop risk mitigation strategies to manage risk in accordance with the organizational risk appetite.
- Formulate specific cybersecurity countermeasures and risk mitigation strategies.
- Ensure decisions relating to cybersecurity are based on sound risk management principles.
- Conduct risk analysis whenever an application or system undergoes a major change.
- Develop methods to monitor and measure risk, compliance, and assurance efforts.
- Document supply chain risks for critical system elements.
- Enforce compliance with necessary controls and related information security policies.
Qualifications:
-
Preferred Qualifications:
- A tertiary level qualification from a recognized institution.
- Industry-recognized certifications (CISSP, CISM, CISA, CRISC, ISO 27001 or similar) are preferred.
-
Experience:
- 5 to 7 years of equivalent experience in Enterprise and Information Risk Management and IT industry standards.
- Demonstrable experience with information risk management techniques and regulatory compliance requirements.
-
Skills:
- Strong analytical, problem-solving, and decision-making skills.
- Excellent communication and attention to detail.
- Knowledge of governance, risk, compliance (GRC) frameworks.
This role presents an opportunity to play a pivotal part in securing the organization's cybersecurity landscape while fostering a culture of risk management throughout the company.
