IT Security Manager (Arabic Speaker)

Black & Grey HR Consultancy FZE; Al Khobar; On-site; SAR 200,000 - 300,000; Full time

Job summary

A well-established retail group in Saudi Arabia is seeking an experienced IT Security Manager to oversee its cybersecurity initiatives. This role entails protecting information systems across multiple locations, developing security strategies, and leading compliance efforts. Ideal candidates should have significant experience in IT security and a background in team leadership. Competitive salary and benefits await the right individual.

Benefits

Competitive salary and benefits package

Career growth and exposure to high-impact projects

Qualifications

• Minimum of 10 years of experience in IT security, with at least 5 years in a managerial role.
• Extensive hands-on experience with cybersecurity tools.
• Experience in cloud environments such as AWS, Azure, or GCP.

Responsibilities

• Lead and manage cybersecurity initiatives across retail locations.
• Define and enforce security policies and procedures.
• Conduct risk and vulnerability assessments.

Skills

IT Security Management

Cybersecurity Leadership

Network Security

Incident Response

Team Leadership

Security Policy Development

Risk Management

Compliance

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

SIEM

Firewall

IDS/IPS

Endpoint Protection

VPN

Encryption Tools

Job description

Black & Grey HR is recruiting for a well‑established retail group in Saudi Arabia looking to hire a skilled IT Security Manager. The ideal candidate will be responsible to lead and manage its cybersecurity initiatives across distributed retail locations. This role is responsible for protecting the company’s information systems, networks, and sensitive data from cyber threats while ensuring compliance with industry standards and regulatory requirements. The ideal candidate will bring a balance of strategic foresight, technical acumen, and leadership capabilities to oversee the development and implementation of robust security programs.

Key Responsibilities

1. Security Strategy & Policy Development
   • Define, implement, and maintain the organization’s IT security strategy in alignment with business goals and risk frameworks.
   • Develop and enforce security policies, standards, and procedures to protect information assets.
   • Collaborate with business units to incorporate security considerations into all IT operations and projects.
2. Incident Response & Risk Management
   • Lead response efforts during security incidents including investigation, mitigation, and post‑incident reviews.
   • Conduct risk and vulnerability assessments, penetration testing, and implement measures to minimize risks.
   • Monitor security alerts and logs to identify and address potential threats proactively.
3. Security Operations & Monitoring
   • Oversee daily operations of cybersecurity tools and platforms such as SIEM, firewalls, IDS/IPS, endpoint protection, etc.
   • Ensure continuous monitoring and timely patching of systems to defend against threats and exploits.
   • Manage the remediation process for identified vulnerabilities.
4. Compliance & Audit
   • Ensure adherence to applicable regulations (e.g., GDPR, HIPAA, PCI‑DSS).
   • Lead internal security audits and support external assessments.
   • Maintain documentation and readiness for compliance and audit purposes.
5. Team Leadership & Training
   • Manage and mentor a team of security professionals.
   • Organize training programs and promote a security‑aware culture across the organization.
   • Foster continuous improvement and career development within the security team.
6. Collaboration & Advisory
   • Partner with IT teams to embed security into network infrastructure, software development, and system architecture.
   • Advise business stakeholders and project teams on security risks and solutions.
7. Security Architecture & Tooling
   • Evaluate and implement cybersecurity technologies and solutions.
   • Work with system architects to build secure cloud and on‑premises infrastructure.
   • Ensure consistent application of security practices across the enterprise.
8. Reporting & Communication
   • Deliver clear, actionable reports on security incidents, threats, and KPIs to executive management.
   • Serve as the escalation point for all major cybersecurity concerns.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 10 years of experience in IT security, with at least 5 years in a cybersecurity leadership or managerial role.
• Extensive hands‑on experience with security tools such as SIEM, IDS/IPS, firewalls, and endpoint protection.
• Strong knowledge of network security, application security, identity and access management (IAM), and data protection.
• Experience in implementing and managing security technologies including VPNs, encryption, and anti‑malware solutions.
• Familiarity with vulnerability scanning, penetration testing, and threat modeling methodologies.
• Experience working with cloud environments such as AWS, Azure, or GCP, as well as hybrid IT infrastructures.
• Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer.
• In‑depth knowledge of industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, and SOC 2.

Benefits

• Competitive salary and benefits package
• Career growth and exposure to high‑impact projects