Cyber Security Manager

Company Description

Role Description

• The Cyber Security Manager is a full-time, on-site role based in Riyadh. This role is responsible for leading the design, implementation, and continuous improvement of Arib’s cybersecurity strategy across applications, networks, and data assets. Day-to-day responsibilities include overseeing security operations, managing threat detection and incident response, conducting risk and vulnerability assessments, and ensuring compliance with relevant regulations and standards (including SAMA and other local requirements).
• The Cyber Security Manager will collaborate with engineering, product, and operations teams to embed security-by-design, define and enforce security policies, and guide secure development and deployment practices.
• The role also involves managing security tools and vendors, conducting security awareness training, preparing reports for leadership, and driving remediation plans for identified risks.

Qualifications

• Strong expertise in cybersecurity and information security, including security governance, risk management, and regulatory compliance.
• Hands-on experience in application security, including secure software development practices, code review, and application penetration testing.
• Proficiency in network security, including firewalls, IDS/IPS, VPNs, segmentation, and secure network architecture design.
• Demonstrated experience with vulnerability assessment, threat modeling, and remediation planning across cloud and on-premises environments.
• Proven experience in incident detection and response, including root-cause analysis, containment, and post-incident reviews.
• Familiarity with financial services or fintech environments; experience with SAMA or similar regulatory frameworks is an advantage.
• Ability to lead cross-functional security initiatives, influence stakeholders, and communicate complex security topics to non-technical audiences.
• Bachelor’s degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CISM, CEH, OSCP) are preferred.
• Strong analytical, problem-solving, and documentation skills, with fluency in written