Senior Manager Cybersecurity Risk Management

About the Role: Senior Manager Cybersecurity Risk Management

Saudi Airlines is seeking a Senior Manager Cybersecurity Risk Management to join their team in Jeddah, Makkah, Saudi Arabia. This full-time role involves leading the development and enhancement of the organization’s cybersecurity risk management framework. The position requires a professional with over 10 years of experience in the field, focusing on enterprise-wide identification, assessment, treatment, and monitoring of cyber risks.

Role Purpose and Scope

The primary purpose of this role is to oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance for informed decision-making. The Senior Manager will drive organizational alignment, engage senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems.

Key Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies, ensuring alignment with regulatory requirements (*, NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (*, NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Qualifications and Experience

• A minimum of 10 years of relevant experience in cybersecurity risk management.
• Demonstrated ability to lead the development and implementation of cybersecurity risk frameworks.
• Experience in ensuring compliance with national regulations and global standards.
• Proven capability to provide executive-level guidance and influence senior stakeholders.

Work Environment

This is a full-time position based in Jeddah, Makkah, Saudi Arabia, within a dynamic environment focused on strengthening the organization's cybersecurity posture.

Application Process

Interested candidates are encouraged to apply. Salary details will be discussed during the interview process.