Information Security Governance and Awareness Manager

About the role

The Information Security Governance and Awareness Manager will lead the bank’s compliance with Saudi regulatory frameworks and internal security standards. Reporting to senior risk committees, you will shape the security culture, oversee risk assessments, and ensure that policies align with international best practices.

Key responsibilities

• Ensure compliance with SAMA Cyber Security Framework, NCA frameworks, and other applicable regulations.
• Develop and manage procedures, controls, and self‑assessment programs for regulatory and internal security standards.
• Prepare and present reports to risk committees, tracking remediation of compliance issues.
• Design and run a security awareness program to improve end‑user knowledge of evolving cyber threats.
• Maintain and update the information security policy in collaboration with stakeholders.
• Coordinate submissions to governance bodies, including the Cyber Security Committee.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field.
• Approximately 4 years of experience in information security, with at least 3 years in a governance or awareness role.
• Strong analytical, research and documentation abilities.
• Excellent written and verbal communication in both Arabic and English.
• Detail‑oriented mindset with a risk‑based approach and eagerness to learn.

Required skills

• Network security
• Endpoint security
• Application security
• Cybersecurity risk management