IT Security Manager (Arabic Speaker)

Black & Grey HR; Tabuk, Al Khobar; On-site; SAR 262,000 - 375,000; Full time

Job summary

A leading recruitment agency in Saudi Arabia seeks an experienced IT Security Manager to oversee cybersecurity initiatives across retail locations. The successful candidate will manage security strategies, lead incident response, and ensure compliance with industry standards. This role requires extensive experience in IT security and knowledge of security technologies. The position offers competitive salary and career growth opportunities.

Benefits

Competitive salary and benefits package

Career growth and exposure to high-impact projects

Qualifications

• Minimum of 10 years of experience in IT security.
• At least 5 years in a cybersecurity leadership or managerial role.
• Strong knowledge of application security and identity management.

Responsibilities

• Define and implement the organization’s IT security strategy.
• Lead response efforts during security incidents.
• Oversee daily operations of cybersecurity tools and platforms.

Skills

Cybersecurity leadership

Network security

Incident response

Risk management

Team leadership

Security policy development

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Tools

SIEM

IDS / IPS

Firewalls

Encryption

Anti-malware solutions

Job description

Job Description

Black & Grey HR is recruiting for a well-established retail group in Saudi Arabia looking to hire a skilled IT Security Manager . The ideal candidate will be responsible to lead and manage its cybersecurity initiatives across distributed retail locations. This role is responsible for protecting the company’s information systems, networks, and sensitive data from cyber threats while ensuring compliance with industry standards and regulatory requirements. The ideal candidate will bring a balance of strategic foresight, technical acumen, and leadership capabilities to oversee the development and implementation of robust security programs.

Key Responsibilities

1. Security Strategy & Policy Development

• Define, implement, and maintain the organization’s IT security strategy in alignment with business goals and risk frameworks.
• Develop and enforce security policies, standards, and procedures to protect information assets.
• Collaborate with business units to incorporate security considerations into all IT operations and projects.

2. Incident Response & Risk Management

• Lead response efforts during security incidents including investigation, mitigation, and post-incident reviews.
• Conduct risk and vulnerability assessments, penetration testing, and implement measures to minimize risks.
• Monitor security alerts and logs to identify and address potential threats proactively.

3. Security Operations & Monitoring

• Oversee daily operations of cybersecurity tools and platforms such as SIEM, firewalls, IDS / IPS, endpoint protection, etc.
• Ensure continuous monitoring and timely patching of systems to defend against threats and exploits.
• Manage the remediation process for identified vulnerabilities.

4. Compliance & Audit

• Ensure adherence to applicable regulations (e.g., GDPR, HIPAA, PCI-DSS).
• Lead internal security audits and support external assessments.
• Maintain documentation and readiness for compliance and audit purposes.

5. Team Leadership & Training

• Manage and mentor a team of security professionals.
• Organize training programs and promote a security-aware culture across the organization.
• Foster continuous improvement and career development within the security team.

6. Collaboration & Advisory

• Partner with IT teams to embed security into network infrastructure, software development, and system architecture.
• Advise business stakeholders and project teams on security risks and solutions.

7. Security Architecture & Tooling

• Evaluate and implement cybersecurity technologies and solutions.
• Work with system architects to build secure cloud and on-premises infrastructure.
• Ensure consistent application of security practices across the enterprise.

8. Reporting & Communication

• Deliver clear, actionable reports on security incidents, threats, and KPIs to executive management.
• Serve as the escalation point for all major cybersecurity concerns.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 10 years of experience in IT security, with at least 5 years in a cybersecurity leadership or managerial role.
• Extensive hands‑on experience with security tools such as SIEM, IDS / IPS, firewalls, and endpoint protection.
• Strong knowledge of network security, application security, identity and access management (IAM), and data protection.
• Experience in implementing and managing security technologies including VPNs, encryption, and anti‑malware solutions.
• Familiarity with vulnerability scanning, penetration testing, and threat modeling methodologies.
• Experience working with cloud environments such as AWS, Azure, or GCP, as well as hybrid IT infrastructures.
• Preferred certifications : CISSP, CISM, CEH, CompTIA Security+, AWS Certified Security Specialty, Microsoft Certified : Azure Security Engineer.
• In-depth knowledge of industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, and SOC 2.

Benefits

• Competitive salary and benefits package
• Career growth and exposure to high-impact projects