Cybersecurity Risk Management Manager

SAB; Riyadh; On-site; SAR 250,000 - 450,000; Full time

Job summary

SAB in Riyadh is seeking a Cybersecurity Risk Management Manager to lead risk assessments and threat modeling across SAB IT infrastructure, systems, networks and data. The role focuses on identifying policy gaps, driving mitigation actions, and ensuring risk-based decisions align with enterprise security goals.

Key duties include risk assessment execution, end-user awareness, and collaboration with IT and business units to strengthen security controls.

Qualifications

• Bachelor's degree in Cyber-Security / Computer Science or related field.
• Around 5 years of experience with 3 years in a relevant cybersecurity role.

Responsibilities

• Conduct risk-based Cybersecurity Risk Assessments, meeting SLA commitments.
• Identify policy gaps and propose improvements to SAB IT security posture.
• Explain cybersecurity risks to end users and drive awareness initiatives.
• Advise IT and business on risk mitigations for identified cybersecurity risks.
• Perform final risk assessment before go-live for projects and systems.
• Conduct detailed threat modeling for IT projects and assets.

Skills

Risk Assessment

Threat Modeling

Policy Improvement

SLA Adherence

IriusRisk Tuning

Education

Bachelor's degree in Cyber-Security / Computer Science

Tools

IriusRisk

Job description

Title: Cybersecurity Risk Management Manager

Department: Cybersecurity - Risk Management

Location: Riyadh

Core Responsibilities:

• Conduct detailed and risk-based Cybersecurity Risk Assessment, meeting SLA commitments during IT and cybersecurity engagements.
• Maintains a close awareness of best practices and industry standards in Information Security assesses potential policy gaps and/or loopholes and responding risks to SAB IT infrastructure, systems, network and data and recommends any improvements in policies.
• Liaises closely with end users, explains Cybersecurity risks and the business role in preventing Cybersecurity risks and drives initiatives to sensitize end-users on Cybersecurity risks.
• Advise IT and business on the optimal way of dealing the identified Cybersecurity risks and mitigation.
• Final Cybersecurity Risk Assessment: Execute comprehensive Cybersecurity Risk Assessment before go-live.
• Conduct detailed Cybersecurity Threat Modeling
• Threat Modeling & Risk Assessments: Conduct detailed cybersecurity risk assessments and threat modeling for IT projects and systems – at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document these risks in a centralized risk register.
• Cybersecurity Risk Assessment Validation: Review, analyze, and validate Cybersecurity Risk Assessment results to align the result with Cybersecurity issues raised by other Cybersecurity teams.
• Raise application security related defect
• Enhance Cybersecurity pattern during engagements, periodic assessments or Ad-Hoc assessments by highlighting new risks to domain owners
• All engaged/assigned engagements, periodic assessments or Ad-Hoc assessments should be assessed in accordance to the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern and Cybersecurity Change Review and Engagement Process and within the agreed timeline (SLA)
• Cybersecurity Risk Assessment platform Tuning: Customize and fine-tune Cybersecurity risk assessment platform (e.g., IriusRisk) for optimal compatibility and accuracy.

Qualifications and Requirements:

• Bachelor's degree in Cyber-Security / Computer Science, or related field required.
• Around 5 years of experience with preferred 3 years in a relevant role.