Information Security Manager (KSA National)

Maximus KSA | ماكسيموس السعودية; Riyadh; On-site; SAR 320,000 - 460,000; Full time

Job summary

Maximus KSA | ماكسيموس السعودية in Riyadh seeks an experienced Information Security Manager to oversee governance, risk and assurance within our cybersecurity framework. You will work with senior leadership, IT, Internal Audit, Legal and regulators to keep our security program robust and compliant with Saudi requirements.

The role emphasizes leading ISO 27001 governance, risk registers, and third-party security management, with a focus on PDPL and SDAIA data protection requirements.

Qualifications

• 7–10 years' experience in information security, cybersecurity governance or IT governance.
• At least three years in a managerial or governance-focused role.
• Experience with Saudi regulatory frameworks (NCA ECC) and ISO 27001.
• Professional certifications such as CISM, CISA, ISO 27001 Lead Implementer/Auditor or COBIT 2019.
• Fluent English; Arabic essential.

Responsibilities

• Developing and maintaining the organisation's cybersecurity strategy and roadmap.
• Leading the Information Security Management Framework, aligned with ISO 27001, NCA ECC and Saudi requirements.
• Owning cybersecurity governance, policies, standards and the Cybersecurity Risk Register.
• Leading cybersecurity risk assessments across projects, cloud, new systems and third parties.
• Overseeing security compliance, control reviews and independent audits.
• Tracking audit findings and remediation and reporting key risks to senior management.
• Providing independent oversight of cybersecurity incident governance and response arrangements.
• Managing third-party security and vendor risk.
• Acting as liaison with regulators, auditors and external assessors.
• Partnering with Legal on Saudi PDPL and data protection requirements.

Skills

Information security governance

Cybersecurity governance

Risk management

Audits and assurance

Policy development

Stakeholder management

Job description

We are looking for an experienced Information Security Manager to join our team in Riyadh.

This is a key governance role responsible for the independent oversight, risk management and assurance of our cybersecurity and information security framework. Working closely with senior leadership, IT, Internal Audit, Legal and external regulators, you will help ensure that our security environment remains robust, compliant and aligned with Saudi regulatory requirements.

What you'll be responsible for:

• Developing and maintaining the organisation's cybersecurity strategy and roadmap.
• Leading the Information Security Management Framework, aligned with ISO 27001, NCA ECC and relevant Saudi regulatory requirements.
• Owning cybersecurity governance, policies, standards and the Cybersecurity Risk Register.
• Leading cybersecurity risk assessments across technology projects, cloud solutions, new systems and third-party engagements.
• Overseeing security compliance, control reviews and independent cybersecurity audits.
• Tracking audit findings and remediation activities and reporting key risks to senior management.
• Providing independent oversight of cybersecurity incident governance and response arrangements.
• Managing third-party security and vendor risk.
• Acting as a key liaison with regulators, auditors and external assessors.
• Partnering with Legal and other stakeholders on Saudi PDPL and data protection requirements.

What we're looking for:

You'll bring 7–10 years' experience in information security, cybersecurity governance or IT governance, including at least three years in a managerial or governance-focused role.

We're particularly interested in candidates with:

• Strong experience with NCA ECC and Saudi cybersecurity regulatory frameworks.
• Knowledge of Saudi PDPL and SDAIA requirements.
• Strong ISO/IEC 27001 experience, including leading audits.
• Experience in cybersecurity governance, risk, compliance and assurance.
• Strong policy development, reporting and senior stakeholder management skills.
• Professional certifications such as CISM, CISA, ISO 27001 Lead Implementer/Auditor or COBIT 2019.
• Fluent English; Arabic Essential

If you have strong information security governance experience and understand the Saudi cybersecurity regulatory landscape, we'd be interested in hearing from you.

#InformationSecurity #CyberSecurity #GRC #InformationSecurityManager #CyberSecurityJobs #RiyadhJobs #SaudiArabiaJobs #ISO27001 #NCA #RiskManagement