Information Security Manager

About the Role

Jeddah Central Development Company (JCDC) is seeking an Information Security Manager to lead and manage all activities related to protecting the company's digital and physical information assets. This full-time role is based in Makkah, specifically in Jeddah or Makkah city, and operates within the Information Security division. The manager will be responsible for implementing and maintaining data security policies and procedures, ensuring data remains secure and compliant with regulatory requirements.

Key Responsibilities

• Manage the implementation of JCDC's data security strategy and the development and enforcement of data security procedures.
• Respond to and manage data security incidents, including post-incident analysis and preventive measure implementation.
• Collaborate with cross-functional teams to protect data assets and integrate data security best practices across the organization.
• Execute training and awareness programs on data security practices and classified information protection.
• Oversee the selection and implementation of data security tools and technologies, and monitor industry trends and threats.
• Provide expert advice on data security to senior management and stakeholders.
• Define and establish access controls for classified data resources in collaboration with data owners.
• Manage reviews of access controls and permissions, and the process for granting, modifying, and revoking access to data resources.
• Approve identity and access management requests for various systems (database, SAP, cloud drives, DLP, RMS) to prevent data breaches.
• Monitor user access review activities across JCD data systems.
• Develop and implement processes for handling data subject requests (access, rectification, deletion).
• Ensure data privacy best practices are integrated throughout the organization and monitor compliance with data privacy laws.
• Lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for projects and systems.
• Manage the organization's data breach response and notification procedures.

Strategic and Operational Management

• Ensure the divisional strategy is cascaded into sectional business plans for vertical alignment and horizontal integration.
• Manage the achievement of objectives by leading the designated section, setting individual goals, managing performance, and motivating staff.
• Lead talent development initiatives for the section, collaborating with experts to ensure talent availability.
• Prepare and recommend the sectional budget, monitoring financial performance against it.
• Ensure effective implementation of policies, procedures, and controls to meet requirements and deliver cost-effective service.
• Identify opportunities for continuous improvement and sustainability of systems, processes, and practices.
• Ensure timely and accurate preparation of department reports that meet JCDC requirements and quality standards.

Qualifications and Experience

• A minimum of 8 to 10 years of relevant experience in information security management.
• Demonstrated ability to manage and lead teams in information security activities.
• Experience in developing and enforcing data security policies and procedures.
• Proficiency in managing data security incidents and implementing preventive measures.
• Familiarity with identity and access management principles and practices.
• Knowledge of data privacy regulations and experience in conducting privacy impact assessments.

Work Environment

This is a full-time position within the Information Security division at Jeddah Central Development Company. The role requires coordination with various teams across the organization and is based in the Makkah region, specifically in Jeddah or Makkah city.