Healthcare Information Security Leader (GRC & Risk)

My Clinic KSA; Jeddah; On-site; SAR 350,000 - 700,000; Full time

Job summary

My Clinic in Jeddah is seeking an Information Security Manager to lead the cybersecurity program with a strong focus on governance, risk and compliance. You will develop security policies, manage risk assessments, and oversee a third-party SOC provider to ensure PDPL and regional regulatory compliance.

The role requires driving data protection, incident response, DPIAs, and security training while collaborating with IT and business leadership to safeguard patient data and operations.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Business Administration, or related field.
• Master’s degree in Cybersecurity, Information Security, or Risk Management is highly desirable.
• Minimum 7 years in information security or cybersecurity with 3+ years in a managerial/advisory role (GRC).
• Experience with outsourced SOCs preferred.

Responsibilities

• Lead information security program with focus on GRC.
• Develop and maintain security policies, procedures, and guidelines.
• Manage enterprise risk assessments and risk register.
• Oversee outsourced SOC operations and enforce KPIs.
• Ensure compliance with CIS, NIST, NCA, and PDPL regulations.
• Perform DPIAs and oversee incident response plans.
• Deliver organization-wide security training and awareness.
• Manage third-party security providers and data processors.

Skills

Governance

Risk Assessment

Policy Development

Regulatory Knowledge

Cybersecurity Operations

SOC Oversight

Incident Response

Training & Awareness

Third-Party Risk

GRC

Education

Bachelor’s degree in IT/Cybersecurity/CS/IS/Business

Master’s in Cybersecurity/InfoSec/Risk Management (desirable)

Tools

SIEM

IDPS

GRC tools

Job description

My Clinic in Jeddah is seeking an Information Security Manager to lead the cybersecurity program with a strong focus on governance, risk and compliance. You will develop security policies, manage risk assessments, and oversee a third-party SOC provider to ensure PDPL and regional regulatory compliance.

The role requires driving data protection, incident response, DPIAs, and security training while collaborating with IT and business leadership to safeguard patient data and operations.