Cybersecurity Manager

The Job Summary

1

• Build and lead Petromin's cybersecurity function from the ground up, including roadmap, operating model, policies, standards, governance forums and reporting.

2

• Act as hands-on technical lead for security architecture and core controls across identity, endpoints, networks, cloud, email, applications, branches and digital platforms.

3

• Own cybersecurity risk assessment, control gaps, remediation plans and prioritization with IT, Digital Transformation, operations and business leadership.

4

• Design and supervise security operations including SIEM / MSSP, alert monitoring, incident response playbooks, threat intelligence and vulnerability management.

5

• Personally handle high-priority technical tasks, investigations, architecture reviews and escalations where team capacity or expertise is limited.

6

• Manage security incidents end-to-end, coordinate containment and recovery, lead post-incident reviews and maintain crisis communication with management.

7

• Establish compliance and audit readiness, security policies, third-party risk reviews, data protection controls and evidence for applicable Saudi and corporate requirements.

8

• Develop cybersecurity awareness, phishing exercises, executive briefings and practical guidance for employees and business units.

9

• Select, implement and manage security tools and external partners including MSSP, security vendors, auditors and consultants, ensuring value, SLAs and accountability.

10

• Build dashboards, KPIs, risk registers, management reports and budget recommendations for cybersecurity investments.

11

• Use approved AI and automation tools to multiply output, including alert summarization, threat research, vulnerability prioritization, policy / SOP drafts, reporting, workflow automation and scripts while controlling data exposure.

12

• Coach the Cybersecurity Specialist and future team members, create knowledge bases and ensure continuity through documentation and cross-training.

Educational Qualifications

Professional Certifications

Experience

Essential Job Pre-Requisites

• Strong hands-on technical depth across IAM, Microsoft security, endpoint, network, cloud, email, vulnerability management and security monitoring.
• Ability to build a cybersecurity function, roadmap, policies, KPIs, budgets and practical governance from scratch.
• Experience managing incidents, audits, third-party risk, MSSP / vendors and executive reporting.
• Ability to use approved AI, automation, scripts and workflow tools to deliver more with a lean team.
• Strong business communication, decision-making, confidentiality and stakeholder management skills.