Certified Information Security Manager

Abadnet; Riyadh; On-site; SAR 300,000 - 400,000; Full time

Job summary

A leading technology firm in the Riyadh Region is seeking an experienced information security manager to develop and manage comprehensive security programs. The ideal candidate will have a proven track record in security policy development, incident response, and risk management. Excellent communication and leadership skills are essential for this role, which also includes conducting security training and ensuring compliance with industry standards.

Qualifications

• Minimum of 5 years of experience in information security management or a related field.
• Proven track record in developing and implementing security policies and procedures.
• Strong understanding of risk management and mitigation strategies.
• Experience with incident response and crisis management.
• Familiarity with regulatory requirements and industry standards (e.g., ISO 27001, NIST, GDPR).
• Excellent communication and leadership skills.

Responsibilities

• Develop, implement, and manage comprehensive information security programs aligned with organizational objectives.
• Oversee risk assessments and mitigation strategies to protect sensitive data and systems.
• Establish and enforce security policies, standards, and procedures across the organization.
• Lead incident response efforts, including investigation, containment, and remediation of security breaches.
• Collaborate with cross-functional teams to ensure security best practices are integrated into all business processes.
• Conduct regular security awareness training for staff and stakeholders.
• Monitor compliance with relevant regulations, frameworks, and industry standards.

Skills

Information security management

Risk management

Incident response

Communication

Leadership

Analytical skills

Job description

Responsibilities

• Develop, implement, and manage comprehensive information security programs aligned with organizational objectives.
• Oversee risk assessments and mitigation strategies to protect sensitive data and systems.
• Establish and enforce security policies, standards, and procedures across the organization.
• Lead incident response efforts, including investigation, containment, and remediation of security breaches.
• Collaborate with cross-functional teams to ensure security best practices are integrated into all business processes.
• Conduct regular security awareness training for staff and stakeholders.
• Monitor compliance with relevant regulations, frameworks, and industry standards.
• Evaluate and recommend security technologies, tools, and solutions.
• Prepare and present detailed security reports to executive leadership.
• Mentor and guide junior security team members and trainees.

Qualifications

• Minimum of 5 years of experience in information security management or a related field.
• Proven track record in developing and implementing security policies and procedures.
• Strong understanding of risk management and mitigation strategies.
• Experience with incident response and crisis management.
• Familiarity with regulatory requirements and industry standards (e.g., ISO 27001, NIST, GDPR).
• Excellent communication and leadership skills.
• Ability to work effectively in a remote environment.
• Demonstrated analytical and problem-solving abilities.
• Experience conducting security training and awareness programs.
• Commitment to continuous professional development in cybersecurity.