Information Security Manager

Job Overview

The Information Security Manager is responsible for overseeing and directing all efforts to safeguard Jeddah Central Development Company's digital and physical information assets. This role operates within the Information Security division, enforcing and maintaining data security policies and procedures to guarantee that company data remains protected and complies with applicable regulatory requirements. This position involves collaborating cross-departmentally to detect vulnerabilities, manage security incidents, and offer strategic data protection guidance.

Key Responsibilities

• Lead the execution of the data security strategy aligning with overall business objectives.
• Develop, enforce, and manage data security protocols, procedures, and administrative guidelines according to JCDC goals and compliance standards.
• Handle data security incidents by leading investigations and instituting measures to prevent recurrence.
• Collaborate with various teams to secure defined data assets and ensure security best practices are embedded throughout the organization.
• Organize training and awareness initiatives to educate staff on data protection and the handling of classified information.
• Select and implement security tools and technologies to boost the organization's protection capabilities.
• Monitor evolving industry threats, trends, and best practices to keep policies current.
• Advise senior management and key stakeholders on data security matters.
• Work jointly with data owners to establish and review access controls and permissions for classified data.
• Oversee the processes for granting, adjusting, and revoking access to various data resources, ensuring actions comply with policies and are authorized.
• Manage approvals for identity and access management requests for systems including databases, datasets, USB devices, SAP, cloud drives, e-vaults, URLs, Data Loss Prevention (DLP), and Rights Management Services (RMS) to prevent breaches.
• Supervise user access reviews across all JCDC data systems.
• Develop and implement procedures to efficiently manage data subject requests such as data access, correction, or deletion.
• Ensure integration of data privacy best practices throughout all departments.
• Oversee compliance monitoring with relevant data protection laws and regulations, in collaboration with cybersecurity Governance, Risk, and Compliance (GRC) teams.
• Lead the deployment of data privacy technologies and conduct Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for projects and processes.
• Manage response plans and notification procedures for data privacy incidents to ensure timely and coordinated actions.
• Align divisional strategies with sectional business plans for consistent organizational integration.
• Lead and motivate the designated section's team, managing objectives, performance, and talent development to optimize departmental outcomes.
• Collaborate in talent development efforts to ensure the availability of skilled personnel to meet business needs.
• Prepare, propose, and monitor the section’s budget, overseeing financial performance to align with approved guidelines.
• Implement and maintain policies, systems, processes, and controls to meet all procedural and legislative requirements while delivering quality and cost-effective services.
• Identify avenues for continuous enhancement and sustainability of systems and practices, guided by global standards and cost optimization.
• Ensure timely and accurate preparation of departmental reports in compliance with company policies and quality standards.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related discipline from a recognized university (Master’s degree is preferred).
• Professional certifications strongly preferred include Certified Information Security Manager (CISM) and Certified Information Systems Security Professional (CISSP).
• A minimum of 8 years of experience in a related field, including at least 3 years in a managerial capacity.

Skills and Competencies

• Strong independent knowledge of information security fundamentals and data information security.
• Excellent command of English; Arabic proficiency is advantageous.
• Exceptional verbal and written communication and presentation skills.
• Proficiency with Microsoft Office applications such as Word, Excel, PowerPoint, and Outlook.
• Adeptness at rapidly learning and adapting to new technological tools and software within the organization.
• Understanding of the cultural and professional context of Saudi Arabia and the GCC region.
• Knowledge of relevant market practices, laws, and regulations with the ability to interpret and apply them to ensure compliance.
• Competency in utilizing industry-standard information security tools, software, and methodologies.
• Exemplify soft skills as outlined in JCDC’s Competency Framework appropriate to this role’s responsibilities.