Senior Manager, Cybersecurity Risk Management

SAUDI AIRLINES; Jeddah; On-site; SAR 350,000 - 600,000; Full time

Job summary

SAUDI AIRLINES is seeking a senior cybersecurity leader to develop, implement, and continuously enhance the enterprise risk management framework. You will oversee identification, assessment, treatment, and monitoring of cyber risks across functions, cloud environments, and third‑party ecosystems.

The role drives governance, ensures regulatory and standards compliance, and provides executive-level guidance. You will lead a team, deliver risk posture dashboards to executives and regulators, and

Qualifications

• Minimum 11 years of work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related discipline.
• Relevant professional certification preferred.

Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Skills

Leadership

Cybersecurity risk management

Stakeholder engagement

Executive reporting

Regulatory compliance

Risk governance

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related discipline

Relevant professional certification

Job description

Role Purpose

Lead the development, implementation, and continuous enhancement of the organization’s cybersecurity risk management framework to ensure enterprise-wide identification, assessment, treatment, and monitoring of cyber risks. Oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance to support informed decision-making. Drive organizational alignment, influence senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems.

Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Qualifications

• Minimum of eleven years’ work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or any related discipline.
• Relevant professional certification preferred.