Cybersecurity Manager

meena Health; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

meena Health seeks an experienced cybersecurity professional to lead day-to-day security operations across healthcare IT environments, including EMR/HIS and cloud services. You will manage vulnerabilities, incidents, and access controls while ensuring regulatory compliance and robust technical controls.

The role requires 5–7 years of practical cybersecurity experience in healthcare, with knowledge of SOC, IAM, GRC, and incident response.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• 5–7 years of practical cybersecurity experience, preferably in healthcare.
• Knowledge across SOC, IAM, vulnerability management, network/cloud security, endpoint security, incident response, and GRC.
• Understanding of healthcare systems, EMR/HIS, patient data, integrations, and medical-device environments.
• Knowledge of NCA ECC and PDPL; ISO 27001 knowledge is a must.
• Certifications such as Security+, CySA+, CEH, CISM, or CISSP are an advantage.

Responsibilities

• Manage day-to-day cybersecurity operations and security controls.
• Monitor and follow up on SOC/SIEM, EDR, vulnerability management, MFA, endpoint, network, and access security activities.
• Identify, assess, and coordinate remediation of cybersecurity vulnerabilities and risks.
• Handle and coordinate security incidents, including investigation, escalation, and closure.
• Implement and maintain cybersecurity policies, procedures, and technical controls.
• Support compliance assessments and evidence collection for NCA ECC, PDPL, ISO 27001 and healthcare requirements.
• Conduct periodic security reviews of HIS/EMR, cloud services, applications, integrations, and medical devices.
• Perform security assessments of technology changes, projects, and third-party solutions.
• Manage user access reviews, privileged access, and security configuration reviews.
• Coordinate penetration testing, vulnerability assessments, and remediation activities with internal and external teams.
• Maintain cybersecurity documentation, risk registers, incident records, and compliance evidence.
• Provide cybersecurity guidance and awareness to IT and business teams.

Skills

SOC

IAM

Vulnerability Mgmt

Network security

Cloud security

Endpoint security

Incident response

GRC

Healthcare systems

EMR/HIS

Medical devices

Education

Bachelor’s degree in Cybersecurity/IT/CS

Certifications (Security+, CySA+, CEH, CISM, CISSP)

Job description

Responsible for the day-to-day management and implementation of cybersecurity controls, monitoring security risks, supporting compliance requirements, and coordinating security activities across IT and digital healthcare environments. The role requires broad cybersecurity knowledge, practical technical experience, and an understanding of healthcare systems and data.

Key Responsibilities

• Manage day-to-day cybersecurity operations and security controls.
• Monitor and follow up on SOC/SIEM, EDR, vulnerability management, MFA, endpoint, network, and access security activities.
• Identify, assess, and coordinate remediation of cybersecurity vulnerabilities and risks.
• Handle and coordinate security incidents, including investigation, escalation, and closure.
• Implement and maintain cybersecurity policies, procedures, and technical controls.
• Support compliance assessments and evidence collection for NCA ECC, PDPL, ISO 27001, and healthcare requirements.
• Conduct periodic security reviews of HIS/EMR, cloud services, applications, integrations, and medical devices.
• Perform security assessments of technology changes, projects, and third-party solutions.
• Manage user access reviews, privileged access, and security configuration reviews.
• Coordinate penetration testing, vulnerability assessments, and remediation activities with internal and external teams.
• Maintain cybersecurity documentation, risk registers, incident records, and compliance evidence.
• Provide cybersecurity guidance and awareness to IT and business teams.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 5–7 years of practical cybersecurity experience, preferably in healthcare.
• Working knowledge across SOC, IAM, vulnerability management, network/cloud security, endpoint security, incident response, and GRC.
• Good understanding of healthcare systems, EMR/HIS, patient data, integrations, and medical-device environments.
• Knowledge of NCA ECC and PDPL; ISO 27001 knowledge is must.
• Relevant certifications such as Security+, CySA+, CEH, CISM, or CISSP are an advantage.