Lead Cybersecurity Risk Management

About the role

We are seeking an experienced Lead Cybersecurity Risk Management professional to oversee and enhance our cybersecurity risk operations within the banking sector in Riyadh. The role involves managing day‑to‑day risk activities, ensuring compliance with Saudi regulatory frameworks, and supporting the organization’s security posture.

Key responsibilities

• Support and manage daily cybersecurity risk management operations.
• Conduct business‑as‑usual risk assessments for applications and business processes.
• Perform on‑demand risk assessments for changes and projects.
• Maintain and optimize cybersecurity risk documentation.
• Assess third‑party risks and conduct related risk assessments.
• Collaborate with technical teams to understand and evaluate risk assessment requests.
• Ensure alignment with KSA regulatory frameworks such as SAMA‑CSF, NCA‑ECC, and NCA‑CCC.

Required profile

• Minimum 7 years of experience in cybersecurity risk management, preferably in the banking domain.
• Strong knowledge of KSA regulatory frameworks (SAMA‑CSF, NCA‑ECC, NCA‑CCC).
• Computer Science or related degree.
• Relevant certifications such as CISSP or CISM.

Required skills

• CISSP
• CISM