Information Security Manager

شركة بن يعلا للصرافة | Bin Yaala for Exchange; Jeddah; On-site; SAR 300,000 - 400,000; Full time

Job summary

A financial services institution in Jeddah is seeking a qualified Information Security Manager to oversee its cybersecurity framework. Your responsibilities will include developing security policies, managing risk, leading incident responses, and ensuring compliance with regulatory requirements. Ideal candidates will have a degree in Cybersecurity and extensive experience in the field, particularly within regulated environments. This is a full-time position, exclusive to Saudi nationals.

Qualifications

• Minimum of 8 years of experience in IT, including at least 4 years in cybersecurity roles.
• Proven hands-on experience implementing Saudi Central Bank (SAMA) cybersecurity controls.

Responsibilities

• Develop, implement, and maintain information security policies in alignment with SAMA regulatory requirements.
• Manage the technology risk register and oversee remediation plans.
• Supervise SOC and SIEM services and review security incident reports.
• Lead incident response activities and regulatory reporting.
• Ensure compliance with data protection requirements.

Skills

Cybersecurity

Risk Management

Data Protection

Education

Bachelor’s degree in Cybersecurity, Information Technology, or a related field

Job description

Information Security Manager

Location: Saudi Arabia / JEDDAH

Industry: Financial Services / Exchange

Employment Type: Full-Time

Only for Saudis

Role Overview

We are seeking an experienced Information Security Manager to lead the cybersecurity framework within a financial institution regulated by the Saudi Central Bank (SAMA).

The role is responsible for ensuring full compliance with regulatory cybersecurity requirements, overseeing managed security service providers (MSSP), and maintaining the independence and effectiveness of the Information Security function.

Key Responsibilities

• Develop, implement, and maintain information security policies in alignment with SAMA regulatory requirements.
• Manage the technology risk register and oversee remediation plans.
• Supervise SOC and SIEM services and review security incident reports.
• Lead incident response activities, including escalation and regulatory reporting when required.
• Ensure compliance with data protection requirements and safeguard customer information confidentiality.
• Review infrastructure security controls, database security measures, and access management processes.
• Oversee penetration testing activities and ensure remediation of regulatory findings.
• Prepare periodic security and compliance reports for senior management and the Risk Committee.

Qualifications & Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• Minimum of 8 years of experience in IT, including at least 4 years in cybersecurity roles.
• Proven hands‑on experience implementing and applying Saudi Central Bank (SAMA) cybersecurity and regulatory controls.
• Experience within a regulated financial institution (banking, exchange, or financial services).
• Professional certifications such as CISSP, CISM, or ISO 27001 Lead Implementer are preferred.

Preferred Experience

• Strong understanding of regulatory cybersecurity frameworks.
• Experience managing compliance programs and regulatory inspections.
• Ability to prepare compliance reports and respond to regulatory findings.

Other Information

Send your CV to this email: [e-mail]

with the job title as an email subject