Information Security Governance and Awareness Manager

Overview

Information Security Governance and Awareness Manager Jobs in Riyadh, Saudi Arabia at SAB

Title: Information Security Governance and Awareness Manager

Company: SAB

Location: Riyadh, Saudi Arabia

Job Title: Information Security Governance and Awareness Manager

Division: Cybersecurity

Location: Riyadh

Working Hours: 8:00 AM to 5:00 PM (Sunday to Thursday)

Core responsibilities:

• Ensures compliance with SAMA Cyber Security Framework, NCA frameworks, and other applicable regulatory requirements
• .Responsible for procedures and controls to assure compliance with applicable regulatory requirements and internal security controls/standards
• .Establish and oversee formal risk analysis and self-assessments program for applicable regulatory requirements/frameworks and internal security controls/standards
• .Manage reporting to various Risk Committees in the bank
• .Liaise with multiple relevant functions to remediate new and outstanding compliance issues related to applicable regulatory requirements/frameworks and internal security controls/standards
• .Track and report on issues related to applicable requirements/frameworks/internal security controls and standards
• .Develop and report key indicators in line with regulatory requirements/frameworks implementations/internal security controls and standards
• .Oversight and track the risks/issues remediation efforts
• .Manage and implement the security awareness program to improve the security culture/knowledge among end users of the ever-evolving cyber security threats
• .Manage the information security strategy execution with respective stakeholders
• .Manage and maintain the information security policy with the respective stakeholders and ensure the alignment with regulatory requirements, international standard, and best practices
• .Manage the submission to the different risk governance committees including Cyber Security Committee

.
What We’re Looking F

• orBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related fie
• ldgood understanding of cybersecurity concepts – including network, endpoint, and application securi
• tyAwareness of cybersecurity risk management principles and security control framewor
• ksFamiliarity with SAMA and NCA regulatory requirements is an advanta
• geStrong research, analytical, and documentation skil
• lsExcellent written and verbal communication in Arabic and English – ability to present findings clearly and concise
• lyEagerness to learn, high attention to detail, and a risk-based minds
• etFor years of experience: Around 4 years of experience with preferred 3 years in a relevant rol

e.