Information Technology Security Manager📣 Job Ad

About Cenomi Retail

Founded in 1990 as Fawaz Alhokair Fashion Retail Co., Cenomi Retail has introduced over 80 international retail and F&B brands to Saudi Arabia, including Zara, Mango, Aldo, Cinnabon, and Subway. The company operates more than 1,600 stores across 100 shopping centers in 11 countries. Cenomi Retail is dedicated to growth and aims to offer a unique brand partnership proposition.

About the Role

Cenomi Retail is seeking an Information Technology Security Manager to join its team in Riyadh, Saudi Arabia. This full-time position reports to the IT Director. The primary goal of this role is to ensure the confidentiality, integrity, and availability of the organization's information and systems. The manager will lead the IT Security strategy, foster team growth, manage third-party risks, ensure regulatory compliance, and continuously monitor performance for effective safeguarding.

Key Responsibilities

• Collaborate in the execution of the organization's IT Security strategy to safeguard critical assets and data.
• Set the overarching strategy for third-party risk management and ensure alignment with organizational security standards.
• Define the organization's physical security strategy, ensuring integration with broader security goals.
• Direct the strategic vision and ensure alignment of the organization's network security initiatives with overarching IT Security goals.
• Determine the strategic approach to data protection, ensuring alignment with regulatory requirements.
• Establish the IT Security incident management framework and strategy, ensuring organizational preparedness.
• Consider IT Security requirements in all outsourcing contracts.
• Evaluate and assess security risks associated with third-party vendors and service providers to protect the organization's data and assets.
• Set the direction for Vulnerability Assessment and Penetration Testing (VAPT) initiatives, ensuring thorough coverage and regulatory compliance.
• Oversee the monitoring and logging of all administrative activities, implement stringent privileged access controls, and periodically conduct comprehensive access reviews to ensure adherence to IT Security protocols.
• Establish key performance indicators (KPIs) to measure the effectiveness of security initiatives and track progress toward security goals.
• Develop and deliver security training and awareness programs.
• Stay abreast of emerging threats and technologies.
• Provide leadership and guidance to a team of IT Security professionals, fostering their growth and ensuring effective security practices.

Required Experience and Qualifications

• 7-9 years of relevant experience in IT Security or a related role, with a demonstrated track record of leading successful security initiatives.
• Proven experience in managing third-party risks and ensuring compliance with industry regulations and standards.
• Strong background in developing and executing IT Security strategies.
• Experience in responding to and managing security incidents.
• Strong understanding of firewalls, VPNs, IDS/IPS, and other network security technologies.
• Knowledge of secure coding practices, web application security, and vulnerability assessment & Penetration Testing (VAPT).
• Previous experience in team leadership and people management, with a focus on promoting team growth and ensuring effective security practices.
• Track record of successful collaboration with cross-functional teams to integrate security measures effectively.

Job Specific Skills

• Industry Specific: Deep understanding of IT Security regulations, standards, best practices, and trends within the retail industry.
• Data-Driven: Ability to analyze complex issues and make data-driven decisions for proper tracking and optimizing of IT Security processes.
• Ethics and Integrity: Ethical and committed to upholding the highest standards in IT Security.
• Regulatory Expert: Strong understanding of IT Security regulatory requirements and applicable laws and regulations in the Kingdom of Saudi Arabia.
• Technical Knowledge: Excellent knowledge in IT Security tools, methodologies, and frameworks.
• Analytical: Strong analytical and problem-solving skills, and the ability to define and track key performance indicators (KPIs) for IT Security efforts.
• Leadership Skills: Demonstrated leadership abilities in managing and motivating teams focused on IT Security matters.
• Communication Skills: Ability to work collaboratively across departments and with external stakeholders.