Senior Manager, Third-Party Security Risk & Compliance

Qiddiya; Riyadh; On-site; SAR 280,000 - 520,000; Full time

Job summary

Qiddiya seeks a seasoned leader to head the Third-Party Security Risk Management program. You will oversee security assessments, vendor reviews, and remediation to protect Qiddiya's information assets and operations.

Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams to establish frameworks, monitor KPIs, and drive continuous risk reduction across giga projects and critical partners.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• 8–12 years of cybersecurity experience.
• Minimum 4 years in Third-Party Security, Vendor Risk Management, Cybersecurity Risk Management, or GRC.
• Experience within large enterprises, giga projects, banking, telecom, government, or critical infrastructure environments.
• Experience managing teams and stakeholder engagement at senior levels.

Responsibilities

• Develop and maintain the Third-Party Security Risk Management (TPSRM) framework.
• Conduct cybersecurity due diligence and risk assessments for vendors and suppliers.
• Review security requirements during procurement, RFP, and contract stages.
• Assess cloud providers, SaaS platforms, managed service providers, and strategic partners.
• Define vendor security controls aligned with NCA ECC, ISO 27001, NIST, and Qiddiya cybersecurity standards.
• Establish vendor risk classification and assessment methodologies.
• Monitor remediation plans and track closure of identified security gaps.
• Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams.
• Lead periodic reassessments of critical vendors.
• Report third-party cyber risks, trends, and KPIs to senior management.
• Manage external security audits, questionnaires, and assurance activities.
• Lead and develop the Third-Party Security team.

Skills

Vendor risk management

Security risk assessment

Cybersecurity leadership

Stakeholder engagement

Team management

Education

Bachelor's degree in Cybersecurity/Info Security/CS

Job description

Qiddiya seeks a seasoned leader to head the Third-Party Security Risk Management program. You will oversee security assessments, vendor reviews, and remediation to protect Qiddiya's information assets and operations.

Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams to establish frameworks, monitor KPIs, and drive continuous risk reduction across giga projects and critical partners.