Cybersecurity Manager

Overview

Al Majed Oud Company seeks an experienced Cybersecurity Manager to spearhead the overall cybersecurity strategy, safeguard digital assets, assure compliance with the National Cybersecurity Authority (NCA) mandates, manage associated risks and budgets, and strengthen organizational capabilities.

Key Duties and Responsibilities

• Lead development and approval of a comprehensive cybersecurity strategy aligned with corporate directives and digital transformation goals.
• Define and enforce security protocols for infrastructure, networks, servers, and cloud services, coordinating with Operations and Infrastructure teams to ensure compliance.
• Authorize response strategies for cyber incidents and emergencies to protect business continuity and reduce risks.
• Oversee vulnerability assessments and penetration tests, approving subsequent remediation actions.
• Manage cybersecurity across the digital supply chain, technology vendors, and third-party systems.
• Supervise the Security Operations Center (SOC) with 24/7 threat detection monitoring.
• Approve cybersecurity architecture requirements in collaboration with Enterprise Architecture stakeholders.
• Ensure adherence to NCA regulations, including Essential and Critical Systems Cybersecurity Controls.
• Maintain and update the corporate cyber risk register and endorse mitigation plans.
• Develop and enforce internal security policies and facilitate organization-wide implementation.
• Lead cybersecurity awareness efforts and phishing simulation exercises to increase employee vigilance.
• Coordinate with external regulatory agencies and auditors; review compliance and audit reports.
• Monitor projects focusing on personal data protection and transactional confidentiality to ensure regulatory compliance.
• Prepare and oversee the Cybersecurity Department’s annual budget covering licenses, software, and infrastructure.
• Control and monitor operational and capital expenditures related to cybersecurity projects, ensuring budget compliance.
• Evaluate technical and financial viability of security tools to optimize investment returns.
• Lead, guide, and monitor the cybersecurity team to meet operational objectives.
• Define SMART goals and KPIs for team members; approve annual performance reviews and identify training needs.
• Develop succession plans and support the growth of cyber leadership within the team.
• Foster a compliance-driven culture promoting security awareness and team motivation.
• Ensure proper implementation of policies, SOPs, identity management, and access controls.
• Drive initiatives to automate incident response and enhance cyber defense and analytical capabilities.

Required Experience and Qualifications

• 8 to 12 years of specialized expertise in cybersecurity, digital infrastructure protection, and governance.
• Minimum 3 years in supervisory or leadership capacities within cybersecurity.
• Preferred background as an ISO 27001 Lead Implementer or Lead Auditor.
• Bachelor's degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, or related disciplines.
• Mandatory certifications: CISM or CISSP.
• Preferred certification: CRISC.

Core Competencies and Skills

• Strong leadership and strategic management of cybersecurity and digital transformation ecosystems.
• Expertise in cyber governance frameworks, policies, and adherence to national compliance standards.
• Advanced ability to prepare and manage cybersecurity budgets, controlling licensing and project costs.
• Profound knowledge of security architecture for networks, cloud platforms, and e-commerce environments.
• Expertise in cyber risk management including risk register development and treatment strategy formulation.
• Proven ability to lead cyber incident response, crisis management, and disaster recovery processes.
• Comprehensive understanding of NCA regulations and international digital security standards.
• Excellent communication and coordination skills for engagement with executive management and regulatory bodies.