Information Security Manager

Information security manager job details in Jeddah

The manager is accountable for keeping company data secure and compliant with regulatory requirements, working with other teams throughout the company to find weaknesses, handle data security incidents and guide the company on data protection. Beyond the security work, the post carries section-level management duties: preparing and monitoring the sectional budget, putting policies, procedures and controls into effect, keeping department reports timely and accurate, and leading continuous improvement.

Responsibilities

• Implements the data security strategy and enforces its procedures in line with company goals and compliance requirements
• Manages data security incidents, including post-incident analysis and preventive measures
• Works with data owners and teams across the company to protect the data asset inventory and build security and privacy best practices into daily operations
• Oversees identity and access management, from access controls and permission reviews for classified data to approving access requests for e-vaults, cloud drives, SAP, USB, databases, DLP and RMS
• Runs the data privacy work: data subject requests, compliance with the Law and its Implementing Regulations alongside cyber security GRC, PIAs and DPIAs, and breach response and notification
• Selects and rolls out data security and privacy tools, delivers employee awareness training and tracks industry trends and threats
• Advises senior management and key stakeholders on data security matters
• Leads the section by assigning individual objectives, overseeing performance, building talent and carrying divisional strategy down into the section’s own plans

Requirements

• Bachelor’s degree from a reputable university
• Solid knowledge of information security and data information security, with the ability to execute tasks independently and solve routine challenges
• Excellent English (a must)
• Excellent communication, spoken and written, along with presentation skills
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint and Outlook), and the ability to adapt quickly to new software and technology tools the organization uses
• Understanding of the professional and cultural context in KSA and the GCC region
• Good grasp of the market practices, laws and regulations relevant to the role, including how to interpret them and apply them for compliance
• Technical skills for the role, plus soft skills as set out in the JCDC Competency Framework

Preferred qualifications

• Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP)
• Master’s degree
• Arabic language