الخطوط الجوية السعودية تعلن عن وظيفة مدير أول لإدارة مخاطر الأمن السيبراني في جدة

Role Purpose

Lead the development, implementation, and continuous enhancement of the organization’s cybersecurity risk management framework to ensure enterprise-wide identification, assessment, treatment, and monitoring of cyber risks. Oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance to support informed decision-making. Drive organizational alignment, influence senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems.

Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Qualifications

• Minimum of eleven years’ work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or any related discipline.
• Relevant professional certification preferred.