Title: Cybersecurity Risk Management Manager
Department: Cybersecurity - Risk Management
Location: Riyadh
Core Responsibilities:
- Conduct detailed and risk-based Cybersecurity Risk Assessment, meeting SLA commitments during IT and cybersecurity engagements.
- Maintains a close awareness of best practices and industry standards in Information Security assesses potential policy gaps and/or loopholes and responding risks to SAB IT infrastructure, systems, network and data and recommends any improvements in policies.
- Liaises closely with end users, explains Cybersecurity risks and the business role in preventing Cybersecurity risks and drives initiatives to sensitize end-users on Cybersecurity risks.
- Advise IT and business on the optimal way of dealing the identified Cybersecurity risks and mitigation.
- Final Cybersecurity Risk Assessment: Execute comprehensive Cybersecurity Risk Assessment before go-live.
- Conduct detailed Cybersecurity Threat Modeling
- Threat Modeling & Risk Assessments: Conduct detailed cybersecurity risk assessments and threat modeling for IT projects and systems – at early project stages, before major changes, for new technologies, and periodically for existing assets. Identify threats, vulnerabilities, and controls for critical information assets and document these risks in a centralized risk register.
- Cybersecurity Risk Assessment Validation: Review, analyze, and validate Cybersecurity Risk Assessment results to align the result with Cybersecurity issues raised by other Cybersecurity teams.
- Raise application security related defect
- Enhance Cybersecurity pattern during engagements, periodic assessments or Ad-Hoc assessments by highlighting new risks to domain owners
- All engaged/assigned engagements, periodic assessments or Ad-Hoc assessments should be assessed in accordance to the Cybersecurity Risk Management Methodology, Cybersecurity Risk Pattern and Cybersecurity Change Review and Engagement Process and within the agreed timeline (SLA)
- Cybersecurity Risk Assessment platform Tuning: Customize and fine-tune Cybersecurity risk assessment platform (e.g., IriusRisk) for optimal compatibility and accuracy.
Qualifications and Requirements:
- Bachelor's degree in Cyber-Security / Computer Science, or related field required.
- Around 5 years of experience with preferred 3 years in a relevant role.
