Information Security Threat Manager

About the role

The Information Security Threat Manager will lead the identification, assessment, monitoring, and management of cyber threats to protect the bank’s information assets, systems, and digital services. This senior position works closely with security operations, incident response, and other technology teams to strengthen threat detection and ensure rapid response to emerging risks.

Key responsibilities

• Lead the bank’s cyber threat management and threat intelligence programmes.
• Continuously monitor internal and external sources for new threats, vulnerabilities, indicators of compromise, and threat‑actor activity.
• Analyse threats, assess potential impact on systems, applications, infrastructure and customers, and develop threat profiles and attack scenarios.
• Translate threat intelligence into actionable detection rules, monitoring use cases and security controls.
• Coordinate with SOC, Incident Response, Vulnerability Management, Digital Fraud, Infrastructure and Application Security teams to remediate identified threats.
• Support proactive threat‑hunting activities and maintain integration of threat indicators with security monitoring platforms.
• Provide regular threat intelligence and risk updates to Information Security management and support regulatory, audit and cybersecurity assessments.
• Develop and maintain procedures, dashboards, KPIs and reporting related to cyber‑threat management.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• Professional certifications such as CISSP, CISM, GIAC, CEH or equivalent are preferred.
• 7+ years of relevant experience in cybersecurity, including threat intelligence, SOC, incident response, threat hunting or security operations.
• Prior experience in banking or financial services is highly preferred.

Required skills

• Cyber Threat Intelligence
• Threat Hunting
• Security Operations and Incident Response
• SIEM and security monitoring solutions
• Threat intelligence platforms and feeds
• Malware, phishing, ransomware and APT analysis
• Vulnerability and exposure management
• Network and endpoint security
• Cybersecurity risk assessment
• Knowledge of banking cybersecurity regulations and frameworks (e.g., SAMA, NCA)