Manager - Forensics

Ernst & Young AE; Riyadh; On-site; SAR 120,000 - 150,000; Full time

Job summary

A leading company in the cybersecurity sector is seeking a Manager for their Resilience & Digital Trust team. The role involves leading a specialized team in delivering Vulnerability Assessment and Penetration Testing services, enhancing clients' cybersecurity defenses, and ensuring compliance with regulatory standards. Candidates should have extensive experience in digital forensics, strong leadership skills, and the ability to communicate effectively with clients at all levels.

Qualifications

• Minimum of 10 years of hands-on experience in digital forensics and incident response.
• Experience in cloud security testing (e.g., AWS, Azure, GCP).

Responsibilities

• Lead the delivery of managed VAPT services including assessments.
• Oversee planning and execution of penetration testing engagements.
• Mentor junior team members and support capability development.

Skills

Leadership

Communication

Cybersecurity

Education

Bsc. computer science

CISA

CISM

CISSP

ISO 27001

Job description

The opportunity

As a Manager, you ll build valued relationships with external clients and internal peers and develop a portfolio of projects by focusing on high value opportunities. You ll lead presentations and proposals for complex projects or elements of highly complex projects and provide subject matter insight to bids and proposals. Drawing on your skills and experience, you ll create innovative commercial insights for clients, adapt methods and practices to fit operational team and cultural needs, and contribute to thought leadership.

Your key responsibilities

As a Manager in the Resilience & Digital Trust team managing VAPT, you will lead and grow a specialized team responsible for delivering managed Vulnerability Assessment and Penetration Testing (VAPT) services. You will provide strategic advisory and technical expertise to strengthen clients' cybersecurity defenses, identify security weaknesses, and ensure alignment with regulatory and industry best practices.

You will manage multiple client engagements at an executive level, working with senior stakeholders to assess vulnerabilities, simulate real-world attacks, and develop remediation strategies. Your leadership will help organizations proactively identify and mitigate cyber risks, maintain compliance, and enhance their overall security posture.

Specifically, you will need to:

• Lead the delivery of end-to-end managed VAPT services, including network, application, cloud, OT/ICS, wireless, and mobile assessments.
• Oversee scoping, planning, and execution of penetration testing engagements while ensuring quality, consistency, and alignment with recognized frameworks (e.g., OWASP, MITRE ATT&CK, NIST, OSSTMM).
• Develop and maintain VAPT methodologies, testing frameworks, and reporting templates to ensure standardized service delivery.
• Identify security vulnerabilities and misconfigurations and provide clients with actionable risk-based recommendations and remediation plans.
• Manage vulnerability scanning tools and platforms and integrate findings into centralized dashboards for continuous monitoring and reporting.
• Ensure that all assessments are conducted in a safe, controlled manner and in accordance with agreed-upon rules of engagement and regulatory requirements.
• Present findings to technical and non-technical stakeholders, including executive leadership, and support remediation discussions and threat prioritization.
• Collaborate with incident response, threat intelligence, and governance teams to contextualize findings and strengthen overall cyber defense strategy.
• Mentor junior team members, conduct peer reviews, and support capability development across the VAPT team.

To qualify for the role, you must have

• Bsc. computer science or information technology or cyber security
• Certificates such as CISA, CISM, and CISSP, ISO 27001 is a plus
• Minimum of 10 years of hands-on experience in the digital forensics and incident response domain.
• Broad industry expertise and network, and with an establishes experience with a top tier firm
• Lead a team of professionals to combine diverse cross-border experience with local knowledge across a broad spectrum of industries
• Work effectively as a member of a worldwide network of professional advisors, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress
• Strong understanding of expectations of regulators and international organizations such as NCA, ISO, and NIST.

Ideally, you ll also have

• Experience in cloud security testing (e.g., AWS, Azure, GCP environments).
• Familiarity with DevSecOps and secure SDLC principles.
• Experience conducting red teaming or adversary simulation exercises.
• Strong communication skills in both Arabic and English.
• Prior work experience in the Kingdom of Saudi Arabia (KSA), with understanding of local compliance requirements.
• Consulting background with a proven ability to engage C-level clients and deliver executive-level reports.

Company Industry

• Banking
• Broking

Department / Functional Area

• Business Development

Keywords

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]

People Looking for Manager - Forensics Jobs also searched