Executive Manager - Cybersecurity Assurance

Aventus Global Talent; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading regional bank in Riyadh is seeking an Executive Manager for Cybersecurity Assurance to oversee penetration testing and control assurance activities across applications and infrastructures. The role requires over 6 years of experience in cybersecurity assurance and strong knowledge of security assessment frameworks. A successful candidate will excel in stakeholder management, translating technical findings into compelling risk-based reports, and ensuring the bank's cyber resilience through robust testing programs.

Qualifications

• 6+ years’ experience in cybersecurity assurance or technology risk roles within financial services.
• Strong knowledge of penetration testing management and security assessment frameworks.
• Proven ability to translate technical findings into risk-based reporting for senior stakeholders.

Responsibilities

• Design and manage penetration testing and security assurance programs.
• Lead internal and third-party testing engagements ensuring governance and quality.
• Oversee control assessments to evaluate detection and response capabilities.
• Develop assurance reporting and executive updates for senior management.

Skills

Cybersecurity Assurance

Penetration Testing Management

Stakeholder Management

Security Assessment Frameworks

Job description

Title: Executive Manager - Cybersecurity Assurance

Location: Riyadh, Saudi Arabia

About the Client

Our client is a prominent bank in the region, investing heavily in the maturity of its cybersecurity and technology risk framework. They are seeking an Executive Manager - Cybersecurity Assurance to lead independent security testing and control assurance activities across applications, infrastructure, and cloud environments. This role will play a critical part in validating defensive capabilities, overseeing penetration testing programs, and providing senior leadership with clear assurance on the bank’s cyber resilience.

Key Responsibilities

• Design and manage the annual penetration testing and security assurance program across applications, networks, infrastructure, and cloud platforms.
• Lead internal and third‑party testing engagements, ensuring strong governance, quality execution, and adherence to recognised methodologies and standards.
• Oversee purple team exercises and control assessments to evaluate detection, response, and preventative capabilities against realistic threat scenarios.
• Review security testing outputs, validate findings, and ensure timely retesting and closure of remediation actions.
• Partner closely with IT, Cyber Defense, and Engineering teams to track remediation progress, elevate risks, and strengthen security controls.
• Develop assurance reporting, dashboards, and executive updates for senior management and cybersecurity governance forums.

Key Requirements

• 6+ years’ experience in cybersecurity assurance, security testing, or technology risk roles within financial services or highly regulated environments.
• Strong hands‑on knowledge of penetration testing management, control assurance, and security assessment frameworks.
• Experience coordinating internal and external testing providers and managing complex remediation programs.
• Solid understanding of common cyber standards and control frameworks (e.g., regulatory cybersecurity frameworks, industry standards, threat‑based testing models).
• Proven ability to translate technical findings into clear risk‑based reporting for senior stakeholders.
• Excellent stakeholder management skills, with the ability to work effectively across security, technology, and business teams.