Access Control & Cryptography Manager

About the Role

SAB is seeking an Access Control & Cryptography Manager to join its Cybersecurity Department in Riyadh. This full-time role involves leading initiatives related to access management and cryptographic practices within an enterprise-scale financial institution.

Key Responsibilities

• Lead coordination with various bank departments to gather information pertinent to access management and user provisioning.
• Define and implement effective control mechanisms for access rights, authority delegations, and periodic reviews of user profiles across all systems.
• Develop, review, and oversee the implementation of access management and cryptographic policies, standards, and controls (*, encryption, hashing, digital signatures), ensuring alignment with regulatory requirements and industry best practices.
• Ensure policies enforce secure key management and cryptographic practices across all relevant systems and platforms.
• Manage the definition, maintenance, and review of user access and access matrices across all systems and applications.
• Review and enhance onboarding processes for new employees, including user account setup, passwords, and access controls.
• Collaborate with business units during systems implementations or upgrades to define cryptographic keys and access requirements.
• Assess user access controls during User Acceptance Testing (UAT) and on periodic bases to ensure policy compliance.
• Supervise security activities related to the SARIE/RTGS system, including access management, RTGS card issuance, and annual certification renewal, to assure compliance with SAMA and Saudi Payment guidelines.
• Manage the full lifecycle management of cryptographic keys (generation, storage, rotation, archival, revocation, and destruction) to ensure confidentiality and data integrity.
• Manage the administration of PKI and digital certificates, including issuance, renewal, revocation, and compliance with bank policies and regulatory mandates.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Security, or an equivalent major.
• Approximately 5 to 10 years of relevant experience, with at least 3 years in a similar role.
• Experience in an enterprise-scale organization, preferably within the finance or a similarly regulated sector.

Work Environment

This position is based in Riyadh and operates on a full-time basis within the Cybersecurity Department of SAB.