Cybersecurity Manager

We are seeking a Cybersecurity Manager to join a Government Entity in Saudi Arabia. The role will manage the organization’s cybersecurity activities, implement security policies and controls, and coordinate initiatives to protect information assets and strengthen cybersecurity readiness. Key Responsibilities • Develop and maintain cybersecurity policies, procedures, and implementation plans aligned with organizational priorities. • Coordinate cybersecurity risk assessments and track mitigation plans with relevant stakeholders. • Monitor the implementation of security controls across systems, networks, applications, and cloud services. • Manage vulnerability assessments and penetration testing activities, and follow up on remediation. • Coordinate security monitoring, incident response, and recovery activities with internal teams and service providers. • Review access controls, privileged accounts, and periodic access reviews. • Assess cybersecurity requirements for new projects, technology changes, and third-party services. • Maintain compliance evidence, support cybersecurity assessments and audits, and track corrective actions. • Deliver cybersecurity awareness activities and promote secure working practices. • Monitor service provider performance and report cybersecurity risks, incidents, compliance status, and KPIs. • Supervise assigned team members and external resources to ensure effective delivery. Qualifications & Experience • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field. • Relevant experience in cybersecurity, including supervisory, team leadership, or workstream management responsibilities. • Practical experience in cybersecurity risk management, security operations, incident response, vulnerability management, or compliance. • Working knowledge of Saudi National Cybersecurity Authority requirements and relevant security frameworks. • Ability to translate security requirements into practical controls and coordinate implementation with technical and business teams. • Strong problem-solving, stakeholder management, and communication skills. • Relevant certifications such as CISSP, CISM, CRISC, or equivalent are preferred. Experience within a government entity is an advantage. Prior experience establishing a cybersecurity function is beneficial but not required. Only candidates whose experience closely aligns with the role will be contacted. Show more Show less

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field. Relevant experience in cybersecurity, including supervisory, team leadership, or workstream management responsibilities. Practical experience in cybersecurity risk management, security operations, incident response, vulnerability management, or compliance. Working knowledge of Saudi National Cybersecurity Authority requirements and relevant security frameworks. Ability to translate security requirements into practical controls and coordinate implementation with technical and business teams. Strong problem-solving, stakeholder management, and communication skills. Relevant certifications such as CISSP, CISM, CRISC, or equivalent are preferred.

Develop and maintain cybersecurity policies, procedures, and implementation plans aligned with organizational priorities. Coordinate cybersecurity risk assessments and track mitigation plans with relevant stakeholders. Monitor the implementation of security controls across systems, networks, applications, and cloud services. Manage vulnerability assessments and penetration testing activities, and follow up on remediation. Coordinate security monitoring, incident response, and recovery activities with internal teams and service providers. Review access controls, privileged accounts, and periodic access reviews. Assess cybersecurity requirements for new projects, technology changes, and third-party services. Maintain compliance evidence, support cybersecurity assessments and audits, and track corrective actions. Deliver cybersecurity awareness activities and promote secure working practices. Monitor service provider performance and report cybersecurity risks, incidents, compliance status, and KPIs. Supervise assigned team members and external resources to ensure effective delivery.