Manager Cybersecurity Operations

Esports World Cup Foundation; Riyadh; On-site; SAR 299,000 - 375,000; Full time

Job summary

A leading esports organization based in Riyadh seeks a Manager Cybersecurity Operations to oversee their security operations landscape. In this role, you'll manage SOC activities, enhance incident response, and lead proactive threat intelligence initiatives. The ideal candidate will possess extensive experience in cybersecurity operations, technical leadership, and fluency in both Arabic and English. Joining us means contributing to an impactful project in a dynamic environment with competitive benefits.

Benefits

Relocation support

Transportation allowance

Competitive compensation

Housing allowance

VIP medical insurance

Opportunity to work on a new exciting project

Qualifications

• 5+ years in Cybersecurity Operations, with proven experience in leading technical teams.
• Certified in CISM, CISSP, GCIH or GCFA.

Responsibilities

• Lead and manage daily Security Operations Center (SOC) activities.
• Develop, maintain, and continuously improve SOC playbooks.
• Track and report on key performance indicators (KPIs).
• Oversee the collection and analysis of cyber threat intelligence.
• Manage the full incident response lifecycle.
• Coordinate penetration testing and threat simulations.

Skills

In-depth knowledge of cybersecurity frameworks

Advanced technical skills with security technologies

Strong leadership and decision-making abilities

Excellent analytical and problem-solving skills

Fluency in Arabic and English

Education

Bachelor’s degree in Cybersecurity, Computer Science

Tools

SIEM platforms (e.g., Splunk, Microsoft Sentinel)

Digital forensics tools

Job description

Overview

Team: Finance and Business Services

Activity: Full-time

Role grade: Manager (6)

Direct reports: 0

Indirect reports: 0

Reporting to: Senior Manager Cybersecurity

Role location: Riyadh, Saudi Arabia

Job Purpose: As the Manager Cybersecurity Operations, you will lead and oversee the integrated security operations landscape, including the Security Operations Center (SOC), Threat Intelligence, Incident Response (IR), and Cyber Infrastructure. You will ensure proactive defense, rapid response to security incidents and breaches, and the continuous health, resilience, and effectiveness of enterprise security systems.

Responsibilities

• Lead and manage daily Security Operations Center (SOC) activities, ensuring 24/7 monitoring and effective detection, analysis, and response to security events.
• Develop, maintain, and continuously improve SOC playbooks to ensure consistent, standardized, and effective response procedures.
• Track and report on key performance indicators (KPIs) including Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR), driving continuous operational improvement.
• Oversee the collection, analysis, and integration of cyber threat intelligence from multiple internal and external sources to proactively identify and mitigate emerging threats.
• Lead proactive threat-hunting activities to identify hidden threats and indicators of compromise (IoCs) within the environment.
• Translate threat intelligence insights into actionable detection and prevention rules across SIEM and other security platforms.
• Manage the full incident response lifecycle, from detection and containment through eradication, recovery, and post-incident reporting.
• Direct digital forensics activities, including evidence collection, preservation, and analysis to determine root causes and support investigations.
• Supervise malware analysis and reverse engineering efforts to understand attack methods and strengthen defensive controls.
• Oversee the deployment, configuration, and ongoing maintenance of cybersecurity infrastructure, tools, and technologies.
• Ensure optimal integration and performance of security platforms such as SIEM, EDR, firewalls, and related defensive systems to maximize visibility and protection.
• Manage vulnerability assessment activities to identify, prioritize, and track remediation of system and network weaknesses.
• Coordinate authorized penetration testing and breach simulation exercises using realistic threat scenarios to evaluate and enhance the organization’s security posture.

Education And Experience

• Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
• 5+ years in Cybersecurity Operations, with proven experience in leading technical teams (SOC or IR).

Knowledge, Skills, and Abilities

• In-depth knowledge of cybersecurity frameworks, with a strong understanding of the Siyuf Framework and local cybersecurity regulations (NCA/SDAIA).
• Advanced technical skills and hands-on expertise with security technologies, including SIEM platforms (e.g., Splunk, Microsoft Sentinel) and digital forensics tools.
• Certified in CISM, CISSP, GCIH (Incident Handler), or GCFA (Forensics).
• Strong leadership and decision-making abilities, particularly during cybersecurity incidents and crisis situations.
• Excellent analytical, problem-solving, and investigative skills to assess threats, incidents, and vulnerabilities effectively.
• Strong technical reporting, documentation, and presentation skills, with the ability to communicate complex cybersecurity topics clearly to executive and senior management.
• Fluency in Arabic and English (spoken and written).

Benefits

• Relocation support
• Transportation allowance
• Competitive compensation
• Housing allowance
• VIP medical insurance
• Opportunity to work on a new exciting project with a group of passionate professionals. You will get the freedom to excel and make a real impact

Diversity disclaimer

Our mission is to build a diverse organization where our members, regardless of background or identity, have a sense of belonging. We genuinely believe that thanks to creating a collaborative environment where different perspectives are valued, we can achieve more. Together, we want to reshape the boundaries of what is achievable in the esports domain.