InfoSec Governance Lead — ISO27001 & Saudi Regs

Maximus KSA | ماكسيموس السعودية; Riyadh; On-site; SAR 320,000 - 460,000; Full time

Job summary

Maximus KSA | ماكسيموس السعودية in Riyadh seeks an experienced Information Security Manager to oversee governance, risk and assurance within our cybersecurity framework. You will work with senior leadership, IT, Internal Audit, Legal and regulators to keep our security program robust and compliant with Saudi requirements.

The role emphasizes leading ISO 27001 governance, risk registers, and third-party security management, with a focus on PDPL and SDAIA data protection requirements.

Qualifications

• 7–10 years' experience in information security, cybersecurity governance or IT governance.
• At least three years in a managerial or governance-focused role.
• Experience with Saudi regulatory frameworks (NCA ECC) and ISO 27001.
• Professional certifications such as CISM, CISA, ISO 27001 Lead Implementer/Auditor or COBIT 2019.
• Fluent English; Arabic essential.

Responsibilities

• Developing and maintaining the organisation's cybersecurity strategy and roadmap.
• Leading the Information Security Management Framework, aligned with ISO 27001, NCA ECC and Saudi requirements.
• Owning cybersecurity governance, policies, standards and the Cybersecurity Risk Register.
• Leading cybersecurity risk assessments across projects, cloud, new systems and third parties.
• Overseeing security compliance, control reviews and independent audits.
• Tracking audit findings and remediation and reporting key risks to senior management.
• Providing independent oversight of cybersecurity incident governance and response arrangements.
• Managing third-party security and vendor risk.
• Acting as liaison with regulators, auditors and external assessors.
• Partnering with Legal on Saudi PDPL and data protection requirements.

Skills

Information security governance

Cybersecurity governance

Risk management

Audits and assurance

Policy development

Stakeholder management

Job description

Maximus KSA | ماكسيموس السعودية in Riyadh seeks an experienced Information Security Manager to oversee governance, risk and assurance within our cybersecurity framework. You will work with senior leadership, IT, Internal Audit, Legal and regulators to keep our security program robust and compliant with Saudi requirements.

The role emphasizes leading ISO 27001 governance, risk registers, and third-party security management, with a focus on PDPL and SDAIA data protection requirements.