Cybersecurity Risk Management Manager

About the Role

SAB is seeking a Cybersecurity Risk Management Manager to join its team in Riyadh. This full-time role focuses on conducting comprehensive cybersecurity risk assessments and developing mitigation strategies to protect the company's IT infrastructure and data. The position requires 2-5 years of relevant experience.

Key Responsibilities

• Conduct detailed, risk-based Cybersecurity Risk Assessments, meeting SLA commitments during IT and cybersecurity engagements.
• Maintain awareness of best practices and industry standards in Information Security, assessing potential policy gaps and risks to SAB IT infrastructure, systems, networks, and data, and recommending policy improvements.
• Liaise with end-users to explain cybersecurity risks and their role in prevention, driving initiatives to sensitize them to these risks.
• Advise IT and business units on optimal ways to address identified cybersecurity risks and mitigation strategies.
• Execute comprehensive Cybersecurity Risk Assessments prior to system go-live.
• Conduct detailed Cybersecurity Threat Modeling.
• Perform detailed cybersecurity risk assessments and threat modeling for IT projects and systems at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document risks in a centralized register.
• Review, analyze, and validate Cybersecurity Risk Assessment results to ensure alignment with cybersecurity issues raised by other cybersecurity teams.
• Raise application security-related defects.
• Enhance cybersecurity patterns during engagements, periodic assessments, or ad-hoc assessments by highlighting new risks to domain owners.
• Ensure all engaged/assigned engagements, periodic assessments, or ad-hoc assessments are conducted in accordance with the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern, and Cybersecurity Change Review and Engagement Process, and within agreed timelines (SLA).
• Customize and fine-tune cybersecurity risk assessment platforms (*, IriusRisk) for optimal compatibility and accuracy.

Qualifications and Requirements

• Bachelor's degree in Cyber-Security, Computer Science, or a related field.
• Approximately 5 years of experience, with at least 3 years in a relevant role.

Work Environment

This is a full-time position based in Riyadh, where the successful candidate will contribute to strengthening SAB's cybersecurity posture.