Senior Manager - Cybersecurity Risk Management

Qiddiya Investment Company 1; Riyadh; On-site; SAR 450,000 - 750,000; Full time

Benefits offered by this job

Competitive compensation

Benefits package

Job summary

Qiddiya Investment Company seeks a Senior Manager - Cybersecurity Risk Management to lead our risk program and oversee a robust framework aligning to industry standards. You will drive risk assessments, governance, and awareness across the organization, shaping our security posture to meet business objectives.

The role requires 7+ years in cybersecurity risk management, strong leadership, and familiarity with NIST, ISO 27001, and COBIT frameworks.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management or related field (master’s preferred)
• 7+ years in cybersecurity risk management or related roles with leadership experience
• Strong knowledge of cybersecurity frameworks and industry best practices (NIST, ISO 27001, COBIT)
• Experience in risk assessment methodologies and risk mitigation strategies
• Certifications such as CISSP or CRMP are desirable
• Analytical, organized, and strong communicator with strategic mindset

Responsibilities

• Develop and implement a comprehensive cybersecurity risk management framework
• Lead risk and vulnerability assessments to identify threats
• Maintain a cybersecurity risk register with mitigation tracking
• Collaborate with IT, legal, and compliance teams on risk alignment
• Drive training and awareness programs on cybersecurity risk management
• Prepare reports on risks and compliance for leadership
• Stay ahead of threats and adapt risk practices accordingly
• Mentor and lead the cybersecurity risk management team

Skills

Leadership

Cybersecurity risk management

Risk assessment

Frameworks (NIST ISO COBIT)

CISSP

CRMP

Communication

Education

Bachelor's degree in Cybersecurity/IT/Risk Management

Master's degree preferred

Tools

NIST

ISO 27001

Job description

Qiddiya Investment Company is on the hunt for a highly skilled and visionary Senior Manager - Cybersecurity Risk Management to lead our cybersecurity initiatives in a rapidly evolving digital landscape. This critical role will involve overseeing the development and implementation of a robust cybersecurity risk management strategy that safeguards our assets while ensuring compliance with industry standards and regulations.

You will be tasked with identifying and mitigating cybersecurity risks, fostering a culture of security awareness, and leading a team dedicated to maintaining the integrity and security of our information systems. Your expertise will be essential in shaping the direction of our cybersecurity posture in alignment with our business objectives.

Key Responsibilities

• Develop and implement a comprehensive cybersecurity risk management framework tailored to organizational needs and regulatory requirements.
• Lead risk assessments and vulnerability assessments to identify threats and exposures associated with information systems.
• Oversee the creation and maintenance of a cybersecurity risk register, tracking and reporting on identified risks and mitigation efforts.
• Collaborate with IT, legal, and compliance teams to ensure that cybersecurity measures align with overall enterprise risk management strategies.
• Drive the development and execution of training and awareness programs to ensure all employees understand their role in cybersecurity risk management.
• Prepare and present detailed reports on cybersecurity risks and compliance to executive leadership and stakeholders.
• Stay abreast of emerging cybersecurity threats and trends, providing strategic guidance to adapt risk management practices accordingly.
• Mentor and lead the cybersecurity risk management team, ensuring their professional growth and expertise in the field.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field; a master’s degree is preferred.
• 7+ years of experience in cybersecurity risk management or related roles, with substantial experience in leadership positions.
• Strong knowledge of cybersecurity frameworks, methodologies, and industry best practices (e.g., NIST, ISO 27001, COBIT).
• Expertise in risk assessment methodologies and risk mitigation strategies.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Risk Management Professional (CRMP), or equivalent are highly desirable.
• Exceptional analytical, organizational, and communication skills.
• A proactive and strategic mindset, capable of navigating complex challenges in cybersecurity.

Benefits

Offering a comprehensive compensation and benefits package.