Manager IT Security

About the Role

ArcelorMittal Tubular Products Al-Jubail is seeking a Manager, IT Security to lead the organization's IT Security program. This full-time position is based in Al Jubail and involves overseeing strategy, governance, and daily operations. The role requires both strategic direction and hands-on leadership in security operations, risk management, compliance, and incident response to ensure the confidentiality, integrity, and availability of information systems.

Key Responsibilities

• Develop, own, and continuously refine the enterprise IT security strategy, roadmap, and reference architecture, aligning with ISO 27001, NIST, and applicable national/industry regulations.
• Lead, mentor, and manage the IT Security team, including workload planning, performance management, capability development, and succession planning.
• Direct the implementation and administration of enterprise security technologies such as firewalls, IDS/IPS, endpoint protection, anti-malware, email security gateways, SIEM, vulnerability management, and Privileged Access Management (PAM) solutions.
• Oversee enterprise risk assessments, vulnerability management programs, and penetration testing exercises; prioritize, track, and report on remediation of identified risks.
• Manage the organization's security incident response program, leading major incident and breach response, forensic investigations, root cause analysis, and post-incident reviews.
• Establish, maintain, and regularly test disaster recovery (DR) and business continuity plans (BCP) for security-critical systems and services.
• Develop, approve, and enforce information security policies, standards, procedures, and guidelines across the organization; drive ongoing security awareness and training programs for all employees.
• Ensure compliance with applicable regulatory, contractual, and industry frameworks (ISO 27001, NIST, SOX, GDPR/PDPL, SOC 2, etc.), and act as the primary point of contact for internal and external security audits.
• Manage the IT Security budget, vendor relationships, contract negotiations, and procurement of security tools and services in collaboration with Procurement and Finance.
• Collaborate with IT Infrastructure, Network, Applications, Cloud, and Service Desk teams to embed security-by-design principles into projects, systems, and change management processes.
• Provide regular reporting and dashboards on security posture, risk exposure, KPIs, and incident trends to IT leadership and executive management.

Experience and Qualifications

• A minimum of 10 years of experience in IT security is required.
• Demonstrated leadership experience in managing IT Security teams and programs.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Proficiency in managing various enterprise security technologies.
• Experience with risk assessments, vulnerability management, and incident response.

Work Environment

The Manager, IT Security will lead a team of IT Security specialists and partner closely with IT, OT, Cybersecurity, and business units to integrate security into technology and business initiatives. This role is based in Al Jubail and operates on a full-time schedule.

Application Process

Candidates interested in this opportunity are encouraged to apply. Salary details will be discussed during the interview process.