BenchMatrix تعلن عن وظيفة مدير الأمن السيبراني في الرياض

Role Overview

The Cybersecurity Manager will lead and oversee the organization’s cybersecurity operations, ensuring effective threat monitoring, incident response, vulnerability management, and implementation of cybersecurity policies and controls in alignment with the National Cybersecurity Authority (NCA) requirements. The role will be responsible for managing cybersecurity risks, ensuring regulatory compliance, coordinating NCA audit exercises, and strengthening the organization’s overall security posture.

Responsibilities

·       Lead and oversee cybersecurity operations, including security monitoring, threat detection, incident response, and security event management.

·       Manage and investigate cybersecurity incidents, ensuring timely response, escalation, documentation, and resolution.

·       Oversee vulnerability assessments, risk evaluations, remediation activities, and security improvement initiatives.

·       Ensure implementation, monitoring, and compliance with applicable NCA cybersecurity frameworks, including Essential Cybersecurity Controls (ECC) and Critical Systems Cybersecurity Controls (CCC), where applicable.

·       Lead and coordinate ECC and CCC audit exercises, compliance assessments, evidence collection, and remediation of identified gaps.

·       Develop, implement, and maintain cybersecurity policies, standards, procedures, and internal controls in accordance with regulatory requirements and industry best practices.

·       Conduct cybersecurity risk assessments and recommend appropriate mitigation strategies.

·       Manage security monitoring and SIEM tools, ensuring effective analysis of alerts, logs, and potential security threats.

·       Coordinate with IT, infrastructure, risk, compliance, and other relevant teams to address cybersecurity risks and strengthen security controls.

·       Prepare and present cybersecurity reports, risk assessments, audit findings, and compliance updates to senior management.

·       Maintain cybersecurity documentation, asset inventories, incident records, and audit evidence.

·       Lead cybersecurity awareness initiatives, incident response drills, and employee training programs.

·       Monitor emerging cybersecurity threats, regulatory changes, and industry developments to ensure continuous improvement of security practices.

·       Supervise and guide cybersecurity team members, establish priorities, and monitor team performance and deliverables.

Required Knowledge & Skills

·       Strong understanding of cybersecurity principles, security operations, threat management, and incident response.

·       In-depth knowledge of networking concepts, including TCP/IP, firewalls, routing, network security, and intrusion detection and prevention systems.

·       Strong knowledge of Windows and Linux operating systems, system hardening, and security configurations.

·       Hands-on experience with SIEM platforms, security monitoring tools, vulnerability management solutions, and incident response processes.

·       Strong understanding of cybersecurity risk management, security controls, and regulatory compliance requirements.

·       Hands-on experience with NCA cybersecurity frameworks, particularly ECC and CCC, including audit preparation, compliance assessments, evidence collection, and remediation tracking.

·       Proven ability to lead and manage ECC/CCC audit exercises and coordinate with relevant stakeholders to address compliance gaps.

·       Strong analytical, problem-solving, reporting, documentation, and stakeholder management skills.

·       Demonstrated leadership, team management, decision-making, and project coordination capabilities.

·       Ability to assess cybersecurity risks, develop mitigation plans, and communicate technical findings to both technical and non-technical stakeholders.

Preferred Certifications

·       Certified Information Systems Security Professional (CISSP).

·       Certified Information Security Manager (CISM).

·       Certified Ethical Hacker (CEH).

·       CompTIA Security+.

·       Certified Information Systems Auditor (CISA).

·       Relevant NCA-recognized cybersecurity certifications or training programs.

Mandatory Requirements

·       Saudi National (mandatory requirement). Both Saudi males and females are encouraged to apply.

·       Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

·       5-7 years of relevant IT or cybersecurity experience, including experience in a leadership or supervisory capacity.

·       Hands-on experience with NCA ECC and CCC compliance requirements and audit exercises.

·       Proven experience managing cybersecurity operations, risk assessments, security incidents, and regulatory compliance activities.