Information Security Governance and Awareness Manager📣 Job Ad

Role Overview

SAB is seeking an Information Security Governance and Awareness Manager to join its Cybersecurity Division in Riyadh, Saudi Arabia. This is a full-time position, with working hours from 8:00 AM to 5:00 PM, Sunday to Thursday. The successful candidate will play a critical role in ensuring robust information security practices and compliance within the organization.

Position Summary

The Information Security Governance and Awareness Manager is responsible for overseeing compliance with cybersecurity frameworks and regulatory requirements, managing risk analysis programs, and enhancing the security culture across the bank. This role involves developing and implementing security policies, managing strategic execution, and reporting to various risk governance committees.

Key Responsibilities

• Ensure compliance with SAMA Cyber Security Framework, NCA frameworks, and other applicable regulatory requirements.
• Develop and maintain procedures and controls to assure compliance with regulatory requirements and internal security standards.
• Establish and oversee formal risk analysis and self-assessment programs for regulatory requirements and internal security controls.
• Manage reporting to various Risk Committees within the bank.
• Liaise with relevant functions to remediate new and outstanding compliance issues related to regulatory frameworks and internal security controls.
• Track and report on issues related to applicable requirements, frameworks, and internal security controls and standards.
• Develop and report key indicators aligned with regulatory requirements, framework implementations, and internal security controls.
• Oversee and track efforts for risk and issue remediation.
• Manage and implement the security awareness program to enhance security culture and knowledge among end users regarding evolving cyber security threats.
• Manage the execution of the information security strategy with respective stakeholders.
• Manage and maintain the information security policy with stakeholders, ensuring alignment with regulatory requirements, international standards, and best practices.
• Manage submissions to various risk governance committees, including the Cyber Security Committee.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Approximately 4 years of experience, with at least 3 years in a directly relevant information security role.
• Good understanding of cybersecurity concepts, including network, endpoint, and application security.
• Awareness of cybersecurity risk management principles and security control frameworks.
• Familiarity with SAMA and NCA regulatory requirements is considered an advantage.

Essential Skills and Attributes

• Strong research, analytical, and documentation skills.
• Excellent written and verbal communication skills in both Arabic and English, with the ability to present findings clearly and concisely.
• Demonstrated eagerness to learn, high attention to detail, and a risk-based mindset.

Work Environment

This full-time position is based in Riyadh, Saudi Arabia, within SAB's Cybersecurity Division. The role operates on a Sunday to Thursday schedule, from 8:00 AM to 5:00 PM, contributing to a professional and dynamic team focused on maintaining high standards of information security.