Information Security Manager

Nextcare; Al Khobar; On-site; SAR 120,000 - 180,000; Full time

Job summary

An established industry player is seeking an Information Security Manager to lead the implementation of security policies and ensure compliance with local regulations. In this pivotal role, you will manage risk assessments, incident responses, and security operations, safeguarding critical assets and data. The ideal candidate will possess a strong background in cybersecurity laws and demonstrate excellent leadership skills. Join a forward-thinking organization that values innovation and security, and make a significant impact on its regional operations.

Qualifications

• 7+ years of experience in information security, with 3+ years in a managerial role.
• Strong knowledge of KSA cybersecurity regulations and compliance frameworks.

Responsibilities

• Ensure compliance with KSA cybersecurity regulations and implement security policies.
• Lead security incident response efforts and promote cybersecurity awareness.

Skills

Regulatory Compliance

Risk Management

Incident Response

Cybersecurity Awareness

Stakeholder Management

Education

Bachelor's degree in Information Security

CISSP Certification

CISM Certification

CISA Certification

Tools

CrowdStrike

Kaspersky

Forcepoint

Job description

Job Summary:

The Information Security Manager for the KSA Business Unit will be responsible for implementing Nextcare's security policies, procedures, and controls in alignment with KSA regulations and the company's regional security strategy. The role requires strong expertise in local cybersecurity laws, compliance frameworks, and risk management, ensuring the protection of business-critical assets and data.

Key Responsibilities:

• Regulatory Compliance & Governance: Work closely with the Compliance function to ensure compliance with KSA cybersecurity regulations.
• Policy Implementation: Ensure adherence to and enforcement of Nextcare’s security policies and guidelines across the KSA business unit.
• Risk Management: Identify, assess, and mitigate security risks, ensuring appropriate controls are in place to protect sensitive information and IT infrastructure.
• Incident Response & Management: Lead security incident response efforts, including investigation, containment, and reporting to relevant authorities.
• Security Awareness & Training: Promote cybersecurity awareness across the business unit and conduct training programs for employees.
• Third-Party Risk Management: Assess and monitor security risks associated with vendors, partners, and third-party service providers.
• Collaboration & Reporting: Act as the key liaison between the KSA business unit and the regional security team, providing reports on security posture, incidents, and compliance status.
• Security Operations & Monitoring: Oversee security operations, ensuring continuous monitoring, threat detection, and vulnerability management.
• Technical Controls Management: Implement and manage security controls, including:
• Antivirus & Endpoint Detection and Response (EDR): Solutions such as CrowdStrike and Kaspersky.
• Data Loss Prevention (DLP) & Proxy Solutions: Forcepoint and similar technologies.
• Email Security & Other Controls: Ensure robust email security measures and other security controls are in place to protect business operations.
• Emerging Threats & Best Practices: Stay updated on the latest cybersecurity threats, trends, and industry best practices to strengthen the organization's security posture.
  
  

Qualifications & Experience:

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are highly preferred.
• Minimum of 7 years of experience in information security, with at least 3 years in a managerial role.
• Strong knowledge of KSA cybersecurity regulations, including NCA and SAMA frameworks.
• Experience in implementing and managing security controls, risk assessments, and incident response.
• Familiarity with international security standards (ISO 27001, NIST, etc.).
• Excellent leadership, communication, and stakeholder management skills.
• Ability to work effectively in a regional and multicultural environment.