AI Cybersecurity Risk Senior Manager

About the Role

SAB is seeking an AI Cybersecurity Risk Senior Manager to join its team in Riyadh. This full-time position is critical for managing the enterprise-wide cybersecurity risk management program, focusing on AI-specific threats. The role involves developing and maintaining risk assessment methodologies and protecting the organization’s information assets by identifying and assessing risks related to AI use cases.

Key Responsibilities

• Apply the risk framework and control set to specific AI use cases, analyzing exposure to model inversion/extraction, poisoning, prompt injection, and supply-chain risk.
• Assess proposed AI use cases from a cybersecurity risk perspective.
• Conduct working-level design reviews of AI systems across the lifecycle (data pipelines, training, inference infrastructure, MLOps/CI-CD) against AI security standards.
• Apply established technical standards to day-to-day assessments and provide input for standard updates.
• Attend cross-functional design reviews (IT, Model Risk, Data Management, Legal, Compliance) to document and track control requirements per AI initiative.
• Track remediation actions on identified risks, validate evidence of technical closure, and escalate unresolved items.
• Prepare underlying analysis and data for risk reporting.
• Provide AI/ML technical context and analysis to the Security Operations Center (SOC) during AI-related security events.
• Verify specific AI implementations against approved control requirements and risk boundaries, escalating exceptions.
• Apply the security-by-design checklist to individual AI initiatives across development, deployment, monitoring, and evolution.
• Engage directly with early-stage AI project teams to identify gaps before build begins.
• Perform technical identification of AI-specific threats (data leakage/poisoning, model misuse, prompt injection, model drift) for individual use cases and recommend mitigating controls.
• Collaborate with cybersecurity teams to insert AI-specific checkpoints into existing security processes (change management, vendor risk intake).
• Support internal audit/regulatory information requests with technical evidence and analysis.
• Assist in technical due diligence on third-party and vendor AI/ML tools, reviewing security documentation and flagging technical gaps.
• Work directly with Cybersecurity architects reviewing specific architecture designs for AI-related considerations.
• Monitor technical sources (research, advisories, vendor bulletins) on emerging AI threats and brief findings to the team.
• Support continuous refinement of AI cybersecurity documentation and processes.
• Challenge assumptions and validate security claims related to AI-enabled products and services.
• Contribute to AI-related security design patterns and reference architectures.
• Coordinate with Data Management, IT, Model Risk, Legal, and other functions on control implementation and validation for AI systems.
• Contribute to AI cybersecurity awareness and training content for technical and non-technical audiences.

Qualifications and Experience

• A minimum of 5 to 10 years of relevant experience in cybersecurity, with a focus on AI/ML risk management.
• Demonstrated ability to conduct threat modeling and develop risk assessment methodologies.
• Experience in assessing cybersecurity risks for AI use cases and systems.
• Familiarity with AI security standards and best practices across the AI system lifecycle.

Required Skills

• Strong technical understanding of AI/ML concepts, data pipelines, training, inference infrastructure, and MLOps/CI-CD.
• Proficiency in identifying AI-specific threats such as data leakage/poisoning, model misuse, and prompt injection.
• Ability to collaborate effectively with cross-functional teams including IT, Model Risk, Data Management, Legal, and Compliance.
• Excellent analytical and problem-solving skills to identify and mitigate cybersecurity risks.
• Strong communication skills to brief findings and coordinate with various stakeholders.

Work Environment

This is a full-time position based in Riyadh, requiring close collaboration with business, IT, and other Cybersecurity teams. The role involves monitoring emerging AI technologies, threats, and security practices to ensure the organization's resilience against evolving risks.

Application Process

Candidates who meet the qualifications and are interested in contributing to a robust cybersecurity program are encouraged to apply. Salary details will be discussed during the interview process.