Cybersecurity Assurance Manager

About the role

Riyadh Air is seeking a senior professional to lead its cybersecurity assurance and offensive security capabilities. The role combines strategic leadership with hands‑on technical work to strengthen the airline’s cyber‑risk posture across all digital assets.

Key responsibilities

• Lead vulnerability assessments, penetration testing, red‑team operations and threat‑modelling for network, application, cloud and infrastructure environments.
• Collaborate with SOC, DFIR, technology and engineering teams to embed security into system design, delivery pipelines and operational processes.
• Translate technical findings into remediation actions, improve detection capabilities and enforce security requirements within secure SDLC and CI/CD pipelines.
• Ensure assurance activities comply with regulatory and industry standards.

Required profile

• Degree‑qualified with 7+ years of experience in offensive security, penetration testing or cybersecurity assurance.
• Deep understanding of threat modelling, vulnerability management and secure SDLC practices.
• Proven track record in large, regulated or complex environments.

Required skills

• Offensive security and penetration testing
• Vulnerability assessment and red‑team operations
• Threat modelling
• Network, application, cloud and infrastructure security
• Secure SDLC and CI/CD pipeline security
• Regulatory and industry compliance