شركة علم تعلن عن وظيفة مدير - Cybersecurity, Application Security في الرياض
Manager - Cybersecurity, Application Security
🏢 شركة علم
تفاصيل الوظيفة
تعلن شركة علم عن توفر شاغر وظيفي لمسمى (مدير - الأمن السيبراني وأمن التطبيقات) في مدينة الرياض، بهدف قيادة أنشطة حوكمة الأمن السيبراني وإدارة المخاطر والامتثال وحماية الأصول الرقمية بما يتوافق مع السياسات والاستراتيجيات والاشتراطات التنظيمية.
المهام والمسؤوليات
- قيادة تطوير وتنفيذ خطط ومبادرات الأمن السيبراني ضمن النطاق المُسند، وضمان توافق الأهداف مع الأولويات الاستراتيجية.
- الإشراف على تقييمات مخاطر الأمن السيبراني للأنظمة والخدمات والعمليات، واعتماد خطط المعالجة ومتابعتها مع أصحاب المصلحة.
- الإشراف على تصميم وتنفيذ وفعالية ضوابط الأمن السيبراني وضمان الامتثال للوائح والسياسات الداخلية.
- تقديم الاستشارات الأمنية لأصحاب المصلحة التقنيين والتجاريين، ودمج متطلبات الأمن في الحلول والقرارات منذ المراحل المبكرة.
- الإشراف على أنشطة المراقبة الأمنية والاستجابة للحوادث، والتنسيق مع الفرق المعنية أثناء الحوادث ودعم التحقيق والاحتواء والمعالجة.
- الإشراف على إدارة الثغرات والتهديدات، ومراقبة التهديدات الناشئة وتقييم أثرها، ومتابعة إغلاق الثغرات الحرجة.
- بناء علاقات فعالة مع الجهات الداخلية وتعزيز الوعي بالأمن السيبراني وتبني الممارسات الآمنة.
- إعداد ومراجعة لوحات معلومات وتقارير إدارية حول المخاطر والضوابط والامتثال والحوادث وخطط التحسين.
- قيادة مبادرات التحسين المستمر لتعزيز مرونة الأمن السيبراني وفعالية الحوكمة والجاهزية التشغيلية.
- الامتثال لسياسات وإجراءات الأمن السيبراني وسلامة المعلومات لضمان سلامة البيانات وسريتها.
الشروط والمتطلبات
- درجة البكالوريوس في الأمن السيبراني أو أمن المعلومات أو علوم الحاسب أو تقنية المعلومات أو هندسة الحاسب أو مجال ذي صلة.
- يفضل حصول المرشح على درجة الماجستير في مجال ذي صلة.
- يفضل حصول المرشح على شهادات مهنية معتمدة في الأمن السيبراني أو أمن المعلومات أو إدارة المخاطر أو الحوكمة أو المجالات ذات الصلة.
- خبرة لا تقل عن 8 سنوات في مجال الأمن السيبراني أو أمن المعلومات أو الحوكمة والمخاطر والامتثال أو العمليات الأمنية أو إدارة الثغرات أو مجال ذي صلة.
- خبرة في قيادة أنشطة الأمن السيبراني والإشراف على الضوابط وإدارة المخاطر ودعم الامتثال التنظيمي وتنسيق أصحاب المصلحة وتحسين نضج الأمن السيبراني.
عرض النص الأصلي للإعلان
Overview
Job Description
Job Title
Manager
Job Code
701431
Grade
T1
Group
Division
Legal, Risk & Governance
Department
Cybersecurity
Unit
ROLE PURPOSE
The aim is to state the overall significance of the job from the organization's perspective.
The role exists to lead cybersecurity governance, risk, compliance, and protection activities across the assigned scope by setting direction, overseeing security controls, enabling regulatory alignment, and driving cybersecurity maturity. The role contributes to protecting Elm's information assets, digital services, and business operations by ensuring cybersecurity practices are implemented, monitored, and continuously improved in alignment with Elm's approved policies, procedures, strategic objectives, and applicable regulatory requirements.
Key Accountabilities & Activities
This section describes the principal outputs required from the job.
Key Accountabilities
Key Activities
Academic And Professional Qualifications
Job Description
Job Title
Manager
Job Code
701431
Grade
T1
Group
Division
Legal, Risk & Governance
Department
Cybersecurity
Unit
ROLE PURPOSE
The aim is to state the overall significance of the job from the organization's perspective.
The role exists to lead cybersecurity governance, risk, compliance, and protection activities across the assigned scope by setting direction, overseeing security controls, enabling regulatory alignment, and driving cybersecurity maturity. The role contributes to protecting Elm's information assets, digital services, and business operations by ensuring cybersecurity practices are implemented, monitored, and continuously improved in alignment with Elm's approved policies, procedures, strategic objectives, and applicable regulatory requirements.
Key Accountabilities & Activities
This section describes the principal outputs required from the job.
Key Accountabilities
Key Activities
- Cybersecurity Strategy and Governance
- Lead the development and execution of cybersecurity plans, initiatives, and governance activities within the assigned scope.
- Ensure cybersecurity objectives are aligned with Elm's strategic priorities, business requirements, and regulatory expectations.
- Provide direction and guidance on cybersecurity policies, standards, procedures, and control requirements.
- Cybersecurity Risk Management
- Oversee cybersecurity risk assessments for systems, services, processes, and business initiatives.
- Validate key cybersecurity risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability.
- Drive risk treatment plans and follow up with stakeholders to ensure timely mitigation and effective risk reduction.
- Security Controls and Compliance Oversight
- Oversee the design, implementation, and effectiveness of cybersecurity controls across the assigned environment.
- Ensure compliance with applicable cybersecurity regulations, internal policies, and relevant standards.
- Review compliance gaps, remediation plans, and evidence to support audit readiness and management reporting.
- Cybersecurity Advisory and Business Enablement
- Provide cybersecurity advisory support to business and technical stakeholders on initiatives, projects, and services.
- Ensure cybersecurity requirements are embedded into solutions, processes, and business decisions from early stages.
- Balance business enablement with risk-based cybersecurity controls and practical implementation guidance.
- Security Monitoring and Incident Response Oversight
- Oversee cybersecurity monitoring activities and ensure security events are reviewed, escalated, and handled appropriately.
- Coordinate with relevant teams during cybersecurity incidents to support investigation, containment, remediation, and reporting.
- Review incident outcomes and ensure lessons learned are translated into improvement actions.
- Vulnerability and Threat Management
- Oversee vulnerability management activities, including prioritization, remediation follow-up, and risk-based treatment.
- Monitor emerging cybersecurity threats and assess their potential impact on Elm's systems, services, and operations.
- Coordinate with system owners and technical teams to ensure timely closure of critical vulnerabilities and exposure areas.
- Stakeholder Management and Cybersecurity Awareness
- Build and maintain effective relationships with internal stakeholders, business owners, technology teams, and governance functions.
- Promote cybersecurity awareness and support the adoption of secure practices across the assigned scope.
- Facilitate alignment between cybersecurity requirements, business priorities, and operational delivery needs.
- Performance Reporting and Continuous Improvement
- Prepare and review cybersecurity dashboards and management updates covering risks, controls, compliance, incidents, and improvement plans.
- Analyze cybersecurity performance indicators to identify trends, gaps, and maturity improvement opportunities.
- Lead continuous improvement initiatives that enhance cybersecurity resilience, governance effectiveness, and operational readiness.
- Policies, Processes & Procedures
- Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
- Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
- Information Security
- Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.
Academic And Professional Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, or a related field.
- Master's degree in a relevant field is preferred.
- Professional certifications in cybersecurity, information security, risk management, governance, or related fields are preferred.
- 8+ years of relevant experience in cybersecurity, information security, governance, risk and compliance, security operations, vulnerability management, or a related field.
- Experience in leading cybersecurity activities, overseeing security controls, managing cybersecurity risks, supporting regulatory compliance, coordinating stakeholders, and driving cybersecurity maturity improvement initiatives.
المصدر: LinkedIn - أُضيفت للموقع في 7 أكتوبر 2026
رقم الإعلان لدى المصدر: 4475700077
رقم الإعلان لدى المصدر: 4475700077
