Senior Manager, Cybersecurity Risk Management

SAUDI AIRLINES; Jeddah; On-site; SAR 240,000 - 420,000; Full time

Job summary

SAUDI AIRLINES is seeking a senior leader to develop and drive the organization’s cybersecurity risk management framework. You will oversee governance, alignment with regulations, and executive guidance to strengthen risk posture across internal functions, cloud environments, and third-party ecosystems.

The role requires a minimum of eleven years in cybersecurity risk, a relevant bachelor’s degree, and professional certifications.

Qualifications

• Minimum of eleven years of work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related discipline.
• Relevant professional certification preferred.

Responsibilities

• Develop and govern the cybersecurity risk management strategy, framework, and policies.
• Establish enterprise-wide risk governance mechanisms and escalation protocols.
• Define risk appetite and tolerance with executive leadership.
• Oversee comprehensive cybersecurity risk assessments across systems, cloud, and third parties.
• Review major findings and risk treatment plans; approve residual risk acceptances.
• Manage the enterprise cybersecurity risk register and ensure accurate risk categorization.
• Deliver executive-level risk posture reports and dashboards.
• Engage with executives, regulators (e.g., NCA), and external partners on cyber risk topics.

Skills

Cybersecurity risk management

Risk governance

Executive communication

Stakeholder management

Cross-functional leadership

Education

Bachelor's degree in Cybersecurity

Relevant professional certification

Job description

Lead the development, implementation, and continuous enhancement of the organization’s cybersecurity risk management framework to ensure enterprise-wide identification, assessment, treatment, and monitoring of cyber risks. Oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance to support informed decision-making. Drive organizational alignment, influence senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems.

Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Qualifications

• Minimum of eleven years’ work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or any related discipline.
• Relevant professional certification preferred.