Information Security Governance and Awareness Manager

About the role

The Information Security Governance and Awareness Manager will lead the bank’s compliance with Saudi regulatory frameworks and internal security standards. This role drives risk analysis, reporting, and a comprehensive security‑awareness program to strengthen the organization’s cyber‑resilience.

Key responsibilities

• Ensure compliance with SAMA Cyber Security Framework, NCA frameworks and other applicable regulations.
• Develop and maintain procedures, controls, and self‑assessment programs for regulatory and internal security standards.
• Prepare and present reports to risk committees and coordinate remediation of compliance gaps.
• Track and report on issues, indicators, and remediation efforts across the security landscape.
• Design and manage a security‑awareness program to improve user knowledge of evolving cyber threats.
• Oversee the execution of the information security strategy and maintain the security policy in line with international standards.
• Submit updates and recommendations to governance bodies, including the Cyber Security Committee.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or a related field.
• Approximately 4 years of relevant experience, with at least 3 years in a similar role.
• Strong analytical, research and documentation abilities.
• Excellent written and verbal communication in both Arabic and English.
• Detail‑oriented, eager to learn and capable of applying a risk‑based mindset.

Required skills

• Network security
• Endpoint security
• Application security