Manager - Cybersecurity, Application Security

Manager - Cybersecurity, Application Security Job Details | Elm By continuing to use and navigate this website, you are agreeing to the use of cookies. Accept Close Skip to main content Home Life at Elm About Elm Elm Culture Working at Elm Elm Benefits Recruitment Processes Jobs Experienced Professional Fresh Graduates Coop Tainee and Training Programs Part Time and Freelancer Tajseer Program Elm Events Contact Us Search by Keyword Search by Location Clear Home Life at Elm About Elm Elm Culture Working at Elm Elm Benefits Recruitment Processes Jobs Experienced Professional Fresh Graduates Coop Tainee and Training Programs Part Time and Freelancer Tajseer Program Elm Events Contact Us Language العَرَبِيَّة (السعودية) English (United Kingdom) English (United States) View profile Search by Keyword Search by Location Clear Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Apply now » Apply now Apply Now Start applying with LinkedIn Start Please wait... Manager - Cybersecurity, Application Security Date: 7 Oct 2026 Custom Field 1: 701431 Location: Riyadh, SA Facility: Others Job Description OVERVIEW Job Title Manager Job Code 701431 Grade T1 Group - Division Legal, Risk & Governance Department Cybersecurity Unit - ROLE PURPOSE The aim is to state the overall significance of the job from the organization's perspective. The role exists to lead cybersecurity governance, risk, compliance, and protection activities across the assigned scope by setting direction, overseeing security controls, enabling regulatory alignment, and driving cybersecurity maturity. The role contributes to protecting Elm's information assets, digital services, and business operations by ensuring cybersecurity practices are implemented, monitored, and continuously improved in alignment with Elm's approved policies, procedures, strategic objectives, and applicable regulatory requirements. KEY ACCOUNTABILITIES & ACTIVITIES This section describes the principal outputs required from the job. Key Accountabilities Key Activities 1. Cybersecurity Strategy and Governance • Lead the development and execution of cybersecurity plans, initiatives, and governance activities within the assigned scope. • Ensure cybersecurity objectives are aligned with Elm's strategic priorities, business requirements, and regulatory expectations. • Provide direction and guidance on cybersecurity policies, standards, procedures, and control requirements. 2. Cybersecurity Risk Management • Oversee cybersecurity risk assessments for systems, services, processes, and business initiatives. • Validate key cybersecurity risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability. • Drive risk treatment plans and follow up with stakeholders to ensure timely mitigation and effective risk reduction. 3. Security Controls and Compliance Oversight • Oversee the design, implementation, and effectiveness of cybersecurity controls across the assigned environment. • Ensure compliance with applicable cybersecurity regulations, internal policies, and relevant standards. • Review compliance gaps, remediation plans, and evidence to support audit readiness and management reporting. 4. Cybersecurity Advisory and Business Enablement • Provide cybersecurity advisory support to business and technical stakeholders on initiatives, projects, and services. • Ensure cybersecurity requirements are embedded into solutions, processes, and business decisions from early stages. • Balance business enablement with risk-based cybersecurity controls and practical implementation guidance. 5. Security Monitoring and Incident Response Oversight • Oversee cybersecurity monitoring activities and ensure security events are reviewed, escalated, and handled appropriately. • Coordinate with relevant teams during cybersecurity incidents to support investigation, containment, remediation, and reporting. • Review incident outcomes and ensure lessons learned are translated into improvement actions. 6. Vulnerability and Threat Management • Oversee vulnerability management activities, including prioritization, remediation follow-up, and risk-based treatment. • Monitor emerging cybersecurity threats and assess their potential impact on Elm's systems, services, and operations. • Coordinate with system owners and technical teams to ensure timely closure of critical vulnerabilities and exposure areas. 7. Stakeholder Management and Cybersecurity Awareness • Build and maintain effective relationships with internal stakeholders, business owners, technology teams, and governance functions. • Promote cybersecurity awareness and support the adoption of secure practices across the assigned scope. • Facilitate alignment between cybersecurity requirements, business priorities, and operational delivery needs. 8. Performance Reporting and Continuous Improvement • Prepare and review cybersecurity dashboards and management updates cove

Lead cybersecurity governance, risk, compliance, and protection activities across the assigned scope by setting direction, overseeing security controls, enabling regulatory alignment, and driving cybersecurity maturity. Protect Elm's information assets, digital services, and business operations by ensuring cybersecurity practices are implemented, monitored, and continuously improved in alignment with Elm's policies, procedures, objectives, and regulatory requirements. Oversee cybersecurity risk assessments, validate risks, and drive risk treatment plans with stakeholders. Oversee design, implementation, and effectiveness of cybersecurity controls; ensure compliance with regulations and internal policies; support audit readiness. Provide cybersecurity advisory to business and technical stakeholders; embed cybersecurity requirements into solutions and processes from early stages. Oversee monitoring of security events, incident response coordination, and lessons learned. Manage vulnerability and threat management activities, prioritization, remediation follow-up, and risk-based treatment. Build relationships with internal stakeholders and promote cybersecurity awareness. Prepare cybersecurity dashboards and management updates for leadership.