Cybersecurity Risk Management Manager

Title: Cybersecurity Risk Management Manager Department: Cybersecurity - Risk Management Location: Riyadh Core Responsibilities: • Conduct detailed and risk-based Cybersecurity Risk Assessment, meeting SLA commitments during IT and cybersecurity engagements. • Maintains a close awareness of best practices and industry standards in Information Security assesses potential policy gaps and/or loopholes and responding risks to SAB IT infrastructure, systems, network and data and recommends any improvements in policies. • Liaises closely with end users, explains Cybersecurity risks and the business role in preventing Cybersecurity risks and drives initiatives to sensitize end-users on Cybersecurity risks. • Advise IT and business on the optimal way of dealing the identified Cybersecurity risks and mitigation. • Final Cybersecurity Risk Assessment: Execute comprehensive Cybersecurity Risk Assessment before go-live. • Conduct detailed Cybersecurity Threat Modeling • Threat Modeling & Risk Assessments: Conduct detailed cybersecurity risk assessments and threat modeling for IT projects and systems – at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document these risks in a centralized risk register. • Cybersecurity Risk Assessment Validation: Review, analyze, and validate Cybersecurity Risk Assessment results to align the result with Cybersecurity issues raised by other Cybersecurity teams. • Raise application security related defect • Enhance Cybersecurity pattern during engagements, periodic assessments or Ad-Hoc assessments by highlighting new risks to domain owners • All engaged/assigned engagements, periodic assessments or Ad-Hoc assessments should be assessed in accordance to the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern and Cybersecurity Change Review and Engagement Process and within the agreed timeline (SLA) • Cybersecurity Risk Assessment platform Tuning: Customize and fine-tune Cybersecurity risk assessment platform (e.g., IriusRisk) for optimal compatibility and accuracy. Qualifications and Requirements: • Bachelor's degree in Cyber-Security / Computer Science, or related field required. • Around 5 years of experience with preferred 3 years in a relevant role.

Bachelor's degree in Cyber-Security / Computer Science, or related field required. Around 5 years of experience with preferred 3 years in a relevant role.

Conduct detailed and risk-based Cybersecurity Risk Assessment, meeting SLA commitments during IT and cybersecurity engagements. Maintains a close awareness of best practices and industry standards in Information Security assesses potential policy gaps and/or loopholes and responding risks to SAB IT infrastructure, systems, network and data and recommends any improvements in policies. Liaises closely with end users, explains Cybersecurity risks and the business role in preventing Cybersecurity risks and drives initiatives to sensitize end-users on Cybersecurity risks. Advise IT and business on the optimal way of dealing the identified Cybersecurity risks and mitigation. Final Cybersecurity Risk Assessment: Execute comprehensive Cybersecurity Risk Assessment before go-live. Conduct detailed Cybersecurity Threat Modeling. Threat Modeling & Risk Assessments: Conduct detailed cybersecurity risk assessments and threat modeling for IT projects and systems – at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document these risks in a centralized risk register. Cybersecurity Risk Assessment Validation: Review, analyze, and validate Cybersecurity Risk Assessment results to align the result with Cybersecurity issues raised by other Cybersecurity teams. Raise application security related defect. Enhance Cybersecurity pattern during engagements, periodic assessments or Ad-Hoc assessments by highlighting new risks to domain owners. All engaged/assigned engagements, periodic assessments or Ad-Hoc assessments should be assessed in accordance to the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern and Cybersecurity Change Review and Engagement Process and within the agreed timeline (SLA). Cybersecurity Risk Assessment platform Tuning: Customize and fine-tune Cybersecurity risk assessment platform (e.g., IriusRisk) for optimal compatibility and accuracy.