Information Security Vulnerability Assistant Manager

SupportFinity™; Riyadh; On-site; SAR 300,000 - 400,000; Full time

Job summary

A leading cybersecurity firm in Riyadh is seeking an experienced Information Security Vulnerability Assistant Manager. This role involves managing the vulnerability management program, ensuring compliance with SAMA Cybersecurity Framework, and coordinating remediation activities across teams. The ideal candidate will have over 10 years of experience, particularly in vulnerability management and risk assessment. Competitive compensation and a focus on cybersecurity standards are part of the offer.

Qualifications

• Over 10 years in information security management.
• Experience with vulnerability management activities.
• Strong understanding of SAMA Cybersecurity Framework and NCA ECC.

Responsibilities

• Manage end-to-end vulnerability management activities.
• Oversee vulnerability scanning tools and regular coverage.
• Analyze vulnerability findings and recommend mitigation plans.
• Coordinate with various teams for timely remediation.
• Track remediation progress and report risk exposure.
• Support penetration testing activities and validate remediation.
• Ensure compliance with internal security standards.
• Prepare dashboards and management reports.

Skills

Vulnerability management

Risk assessment

Compliance with cybersecurity frameworks

Team coordination

Education

Master's degree

Job description

Information Security Vulnerability Assistant Manager

Apply

Full-time

Riyadh

Negotiable

Master (>10 yrs)

Manage and enhance the Bank’s vulnerability management program by identifying, assessing, prioritizing, and coordinating remediation of information security vulnerabilities. Ensure continuous monitoring, risk-based treatment, and compliance with SAMA Cybersecurity Framework, NCA ECC, and internal security policies to reduce technology and cyber risks.

Key Responsibilities

• Manage end-to-end vulnerability management activities, including scanning, assessment, prioritization, and remediation tracking.
• Oversee vulnerability scanning tools and ensure regular coverage across infrastructure, applications, databases, and endpoints.
• Analyze vulnerability findings, assess risk levels, and recommend mitigation plans aligned with risk appetite.
• Coordinate with IT, Application, Infrastructure, and SOC teams to ensure timely remediation and closure of vulnerabilities.
• Track remediation progress, report risk exposure, and escalate overdue or high-risk vulnerabilities.
• Support penetration testing activities and validate remediation of identified issues.
• Ensure compliance with SAMA Cybersecurity Framework, NCA Essential Cybersecurity Controls (ECC), and internal security standards.
• Prepare dashboards, metrics, and management reports on vulnerability posture and trends.

About the company

Be vigilant about potential scams, phishing attempts, or fraudulent activities, and seek credible sources or reviews to assess the trustworthiness of the company. Remember, your personal and financial security is paramount, and taking preventive measures is crucial to safeguarding your information from potential risks and unauthorized use. SupportFinity is not responsible for any consequences that may arise from disclosing such information to unauthorized or fraudulent entities.