Senior Manager, Third-Party Security Risk & Compliance

Qiddiya Investment Company 1; Riyadh; Presencial; SAR 400.000 - 600.000; Jornada completa

Descripción de la vacante

Qiddiya Investment Company 1 is seeking a seasoned professional to lead and manage the Third-Party Security Risk Management program. You will ensure vendors, partners, consultants, and service providers meet cybersecurity requirements and do not introduce unacceptable risks to information assets, systems, and operations.

You will establish security assessment frameworks, oversee vendor reviews, and drive remediation of identified risks in alignment with industry practices and Qiddiya standards.

Formación

• 8–12 years of cybersecurity experience.
• Minimum 4 years in Third-Party Security, Vendor Risk Management, Cybersecurity Risk Management, or GRC.
• Experience within large enterprises, giga projects, banking, telecom, government, or critical infrastructure environments.
• Experience managing teams and stakeholder engagement at senior levels.

Responsabilidades

• Lead and develop the Third-Party Security Risk Management program.
• Oversee vendor security reviews and remediation of identified risks.
• Define vendor security controls aligned with international standards and Qiddiya requirements.
• Establish vendor risk classification and assessment methodologies.
• Monitor remediation plans and track closure of identified gaps.
• Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams.
• Lead periodic reassessments of critical vendors and report KPIs to senior management.

Conocimientos

Cybersecurity experience

Vendor risk management

GRC experience

Educación

Bachelor's degree in Cybersecurity, Information Security, Computer Science

Descripción del empleo

Qiddiya Investment Company 1 is seeking a seasoned professional to lead and manage the Third-Party Security Risk Management program. You will ensure vendors, partners, consultants, and service providers meet cybersecurity requirements and do not introduce unacceptable risks to information assets, systems, and operations.

You will establish security assessment frameworks, oversee vendor reviews, and drive remediation of identified risks in alignment with industry practices and Qiddiya standards.