Title: Access Control & Cryptography Manager
Department: Cybersecurity
Location: Riyadh
Core Responsibilities:
- Lead the coordination with various bank departments to gather required information related to access management and user provisioning.
- Define and implement effective control mechanisms to govern access rights, monitor authority delegations, and ensure periodic reviews of user profiles across all systems.
- Develop, review, and oversee the implementation of access management and cryptographic policies, standards and controls (e.g., encryption, hashing, digital signatures), ensuring alignment with regulatory requirements and industry best practices.
- Ensure policies enforce secure key management and cryptographic practices across all relevant systems and platforms.
- Manage the definition, maintenance, and review of user access and access matrices across all systems and applications.
- Review and enhance onboarding processes for new employees, including the setup of user accounts, passwords, and access controls.
- Collaborate with business units during systems implementations or upgrades to define cryptographic keys and access requirements.
- Assess user access controls during UAT and on periodic bases to ensure compliance with the policy.
- Supervising the security activities related to SARIE/RTGS system, including managing access, issuing RTGS cards, annual certification renewal, to assure compliance with SAMA and Saudi Payment guidelines.
- Manage the full lifecycle management of cryptographic keys (generation, storage, rotation, archival, revocation, and destruction) to ensure confidentiality and data integrity.
- Manage the administration of PKI and digital certificates, including issuance, renewal, revocation, and compliance with bank policies and regulatory mandates.
Qualifications and Requirements:
- Bachelor’s degree in Computer Science, Information Security or any equivalent major.
- Around 5 years of relevant experience with at least 3 years in a similar role.
- Experience in an enterprise scale organization; preferably in the finance or similarly regulated sector
