Senior Cybersecurity Risk Strategy Lead

Qiddiya Investment Company 1; Riyadh; On-site; SAR 450,000 - 750,000; Full time

Benefits offered by this job

Competitive compensation

Benefits package

Job summary

Qiddiya Investment Company seeks a Senior Manager - Cybersecurity Risk Management to lead our risk program and oversee a robust framework aligning to industry standards. You will drive risk assessments, governance, and awareness across the organization, shaping our security posture to meet business objectives.

The role requires 7+ years in cybersecurity risk management, strong leadership, and familiarity with NIST, ISO 27001, and COBIT frameworks.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management or related field (master’s preferred)
• 7+ years in cybersecurity risk management or related roles with leadership experience
• Strong knowledge of cybersecurity frameworks and industry best practices (NIST, ISO 27001, COBIT)
• Experience in risk assessment methodologies and risk mitigation strategies
• Certifications such as CISSP or CRMP are desirable
• Analytical, organized, and strong communicator with strategic mindset

Responsibilities

• Develop and implement a comprehensive cybersecurity risk management framework
• Lead risk and vulnerability assessments to identify threats
• Maintain a cybersecurity risk register with mitigation tracking
• Collaborate with IT, legal, and compliance teams on risk alignment
• Drive training and awareness programs on cybersecurity risk management
• Prepare reports on risks and compliance for leadership
• Stay ahead of threats and adapt risk practices accordingly
• Mentor and lead the cybersecurity risk management team

Skills

Leadership

Cybersecurity risk management

Risk assessment

Frameworks (NIST ISO COBIT)

CISSP

CRMP

Communication

Education

Bachelor's degree in Cybersecurity/IT/Risk Management

Master's degree preferred

Tools

NIST

ISO 27001

Job description

Qiddiya Investment Company seeks a Senior Manager - Cybersecurity Risk Management to lead our risk program and oversee a robust framework aligning to industry standards. You will drive risk assessments, governance, and awareness across the organization, shaping our security posture to meet business objectives.

The role requires 7+ years in cybersecurity risk management, strong leadership, and familiarity with NIST, ISO 27001, and COBIT frameworks.