Senior Information Security Specialist

Tabby; Saudi Arabia; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading financial technology company in Saudi Arabia is seeking an experienced Information Security Manager to safeguard its information assets. In this role, you will ensure compliance with SAMA guidelines, manage risks, and implement robust security frameworks. You will conduct risk assessments, develop security policies, and promote a culture of security awareness. Strong experience in information security and knowledge of relevant standards are essential for success in this dynamic environment.

Qualifications

• Proven experience in information security.
• Strong knowledge of SAMA requirements and standards.
• Experience with GRC tools is preferred.

Responsibilities

• Ensure adherence to SAMA requirements and standards.
• Conduct risk assessments to identify security threats.
• Oversee the management of security tools and technologies.
• Develop security awareness training programs.
• Prepare regular reports on information security programs.

Skills

Information security experience

Knowledge of SAMA requirements

GRC tools experience (Archer, Cyber Arrow)

Analytical skills

Problem-solving skills

Communication skills

Interpersonal skills

Adaptability in fast-paced environments

Desire for learning and development

Job description

Reporting directly to the Head of Information Security, you will play a pivotal role in safeguarding Tweeq's information assets, managing risks, and driving the implementation of robust security frameworks in compliance with SAMA's guidelines.

Key Responsibilities

Compliance and Governance

• Ensure adherence to SAMA requirements and standards.
• Develop, implement, and maintain information security policies, procedures, and guidelines.
• Monitor compliance with internal security policies and external regulatory requirements.

Risk Management

• Conduct risk assessments and vulnerability analyses to identify and mitigate security threats.
• Develop and implement risk management strategies and controls.
• Monitor and report on the effectiveness of security measures.

Security Operations

• Oversee the implementation and management of security tools and technologies.
• Coordinate with IT and other departments to ensure robust security measures are in place.
• Manage incident response and investigation processes.

Training and Awareness

• Develop and deliver security awareness training programs.
• Promote a culture of security awareness within the organization.

Project Involvement

• Participate in projects, including the onboarding and implementation of new systems, such as GRC tools.
• Attend workshops and contribute to the integration of security requirements into new projects.

Reporting and Documentation

• Prepare regular reports on the status of information security programs.
• Maintain documentation related to security policies, procedures, and incidents.

Skills, Knowledge & Expertise

• Proven experience in information security.
• Strong knowledge of SAMA requirements and standards.
• Experience with governance, risk management, and compliance (GRC) tools such as Archer and Cyber Arrow is preferred.
• Strong analytical and problem‑solving skills.
• Excellent communication and interpersonal skills.
• Ability to work in a fast‑paced, dynamic environment.
• Passionate about learning and career development.