Information Security & Cybersecurity Risk Manager
Posted 12 Aug 2026
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 8–10 yrs
- Management level
- People management
No salary listed for this role.
CertificationsCISSP, CISM
CertificationsISO/IEC 27001 Lead Implementer
Field of studyComputer Science, Cybersecurity, Information Security, Information Technology (or related)
Study levelBachelor's
Information Security & Risk Manager
1. Job Details
Position Title: Information Security & Risk Manager
Department: Technology Services / IT
Reports To: Information Security / CTO
Employment Type: Permanent
Location: Maadi, Degla – On-site
Grade: As per organizational structure
Direct Reports: As per approved organizational structure
2. Job Purpose
The Information Security & Risk Manager is responsible for leading the organization’s Information Security and Cyber Risk function. The role will design, implement, and maintain the cybersecurity program, manage enterprise information security risks, ensure compliance with applicable Saudi regulatory and industry requirements, and promote a strong security-aware culture across the organization.
The role provides strategic and operational leadership across Information Security Governance, Risk & Compliance (GRC), Security Operations, Incident Response, Data Protection, and Security Awareness.
3. Key Accountabilities & Deliverables
The role will be accountable for the development, implementation, and continuous improvement of:
- Information Security Strategy and Cybersecurity Roadmap
- Information Security policies, standards, procedures, and guidelines
- Information Security Management System (ISMS)
- Enterprise IT and Cybersecurity Risk Register
- Information Security Risk Assessment Reports
- Risk Treatment and Remediation Plans
- Security Compliance Reports, including ISO 27001 and applicable regulatory requirements
- Cybersecurity Control Framework and Control Effectiveness Reports
- Vulnerability Assessment and Penetration Testing (VAPT) Reports
- Cybersecurity Incident Reports and Root Cause Analysis (RCA)
- Security Monitoring and Threat Dashboards
- Cybersecurity KPI and KRI Dashboards
- Identity and Access Management (IAM) Policies, Models, and Access Matrices
- Data Classification and Data Protection Framework
- Internal and External Audit Reports and Evidence Repository
- Audit Findings and Remediation Tracking
- Business Continuity and Disaster Recovery (BCP/DR) Security Alignment
- Security Awareness and Training Programs and Reports
- Regulatory Assessments, submissions, and compliance evidence