Manager Cybersecurity Compliance

2 days ago

Riyadh, Ar Riyāḑ, Saudi Arabia Banque Saudi Fransi Full time

The Manager Cybersecurity Compliance is responsible for ensuring the bank's cybersecurity operations, policies, and controls align with applicable regulatory requirements and standards. This role focuses on maintaining compliance with the SAMA Cybersecurity Framework (SAMA CSF), NCA Essential Cybersecurity Controls (NCA ECC), and other relevant frameworks, including international standards where applicable. The manager will oversee regulatory audits, monitor compliance activities, and provide guidance to ensure the bank's cybersecurity processes adhere to legal and regulatory obligations.

This role does not include cybersecurity governance responsibilities but focuses exclusively on managing and enforcing compliance-related activities within the cybersecurity function.

Key Responsibilities
  1. Cybersecurity Regulatory Compliance
    1. Ensure the bank's cybersecurity operations comply with SAMA Cybersecurity Framework (SAMA CSF), NCA Essential Cybersecurity Controls (NCA ECC), and other local or international regulatory requirements.
    2. Conduct regular reviews of cybersecurity processes, policies, and procedures to verify compliance with regulatory frameworks.
    3. Coordinate with internal teams to ensure that security controls, processes, and technical measures align with compliance requirements.
    4. Act as the primary point of contact for regulatory authorities, auditors, and external consultants regarding cybersecurity compliance matters.
  2. Audit and Inspections
    1. Prepare for and manage regulatory cybersecurity audits conducted by SAMA, NCA, or other authorities.
    2. Facilitate internal and external audits, ensuring all required evidence and documentation is accurate and readily available.
    3. Respond to audit findings and recommendations by developing and overseeing corrective action plans to address identified gaps or deficiencies.
    4. Monitor the closure of audit findings and ensure timely remediation of non-compliance issues.
  3. Compliance Monitoring and Reporting
    1. Develop and maintain a cybersecurity compliance monitoring program to ensure adherence to regulatory requirements.
    2. Conduct periodic compliance assessments and gap analyses to identify areas where cybersecurity operations may fall short of regulatory expectations.
    3. Prepare detailed compliance reports for senior management, regulators, and auditors, summarizing the bank's adherence to cybersecurity regulations.
    4. Track compliance metrics and Key Performance Indicators (KPIs), such as the number of audit findings, time-to-remediation, and compliance coverage.
  4. Awareness and Training
    1. Provide training and guidance to cybersecurity staff on compliance requirements, regulatory updates, and audit preparation.
    2. Ensure that all relevant stakeholders understand their roles and responsibilities related to cybersecurity compliance.
    3. Promote a culture of regulatory awareness within the cybersecurity function to ensure all processes and activities meet compliance standards.
  5. Risk-Based Compliance Management
    1. Support the identification, assessment, and mitigation of compliance-related risks within the cybersecurity function.
    2. Collaborate with the risk management team to align compliance activities with the bank's broader risk management framework.
    3. Ensure that compliance-related risks are identified during cybersecurity initiatives, including new projects and system implementations.
  6. Regulatory Updates and Alignment
    1. Stay updated on regulatory changes and new cybersecurity requirements issued by SAMA, NCA, and other authorities.
    2. Interpret regulatory updates and assess their impact on the bank's cybersecurity compliance obligations.
    3. Work with internal teams to implement changes required to meet new or updated regulations.
Qualifications & Experience
  1. Education: Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field (Master's degree preferred).
  2. Certifications: Relevant certifications that demonstrate expertise in cybersecurity compliance, such as:
    1. Certified Information Systems Auditor (CISA).
    2. Certified Information Security Manager (CISM).
    3. Certified Information Systems Security Professional (CISSP).
    4. CRISC (Certified in Risk and Information Systems Control).
  3. Experience: Minimum of 3–4 years of experience in cybersecurity or information security, focused on regulatory compliance in the banking or financial sector.
Knowledge & Skills
  1. Technical Expertise
    1. Regulatory Frameworks: In-depth knowledge of the SAMA Cybersecurity Framework (SAMA CSF) and NCA Essential Cybersecurity Controls (NCA ECC).
    2. Familiarity with other international frameworks and standards such as ISO 27001, PCI DSS, or NIST Cybersecurity Framework (CSF).
    3. Audit and Compliance: Experience with compliance assessments, regulatory audits, and managing remediation plans for cybersecurity-related findings.
    4. Cybersecurity Operations: Understanding of cybersecurity operations, controls, and technologies, including network security, data protection, and incident management.
  2. Soft Skills
    1. Analytical Thinking: Strong ability to assess compliance requirements, identify gaps, and provide actionable solutions.
    2. Communication: Excellent written and verbal communication skills for preparing reports, responding to audits, and engaging with regulators and internal teams.
    3. Proven ability to work collaboratively with cybersecurity, IT, and risk management teams to achieve compliance objectives.
    4. Attention to Detail: Meticulous in reviewing documentation, processes, and evidence to ensure compliance requirements are met.
Seniority level

Not Applicable

Employment type

Full-time

Job function

Other

Industries

Banking

#J-18808-Ljbffr

  • Cybersecurity Expert

    7 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia QMet Arabia Cybersecurity Full time

    Cybersecurity OverviewQMet Arabia Cybersecurity provides consulting services in cybersecurity and management systems consultancy for national and international standards and frameworks.We assist organizations in enhancing their information security posture and achieving compliance with relevant regulations and best practices.

  • Cybersecurity Specialist

    22 hours ago

    Riyadh, Ar Riyāḑ, Saudi Arabia QMet Arabia Cybersecurity Full time

    At QMet Arabia Cybersecurity, we are seeking a highly skilled and motivated Information Security Specialist to join our team in the Riyadh Region.About the RoleThe successful candidate will be responsible for ensuring the security of applications, managing overall cybersecurity policies, overseeing information security management practices, ensuring data...

  • Cybersecurity Compliance Manager

    2 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Banque Saudi Fransi Full time

    About the RoleThe Cybersecurity Compliance Manager is responsible for ensuring that Banque Saudi Fransi's cybersecurity operations, policies, and controls align with applicable regulatory requirements and standards. This role focuses on maintaining compliance with the SAMA Cybersecurity Framework (SAMA CSF) and other relevant frameworks.Key...

  • Compliance Expert

    3 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Banque Saudi Fransi Full time

    What We're Looking ForWe are seeking a highly skilled and experienced Risk Management and Compliance Lead to join our Cybersecurity team at Banque Saudi Fransi. As a Risk Management and Compliance Lead, you will be responsible for ensuring the bank's cybersecurity operations, policies, and controls comply with regulatory requirements and standards.You will...

  • Cybersecurity Compliance Specialist

    3 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Banque Saudi Fransi Full time

    Job SummaryThe Senior Specialist Cybersecurity Compliance is responsible for ensuring that Banque Saudi Fransi's cybersecurity operations, policies, and controls comply with regulatory requirements and standards. This role focuses on implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring alignment with...

  • Compliance and Risk Manager Cybersecurity

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia BSF Full time

    Cybersecurity Compliance OverviewThe Senior Specialist Cybersecurity Compliance plays a critical role in ensuring the bank's cybersecurity operations comply with regulatory requirements and standards. This involves implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring alignment with relevant...

  • Cybersecurity and Compliance Officer

    3 hours ago

    Riyadh, Ar Riyāḑ, Saudi Arabia VisionX Technologies, Inc. Full time

    Job Description:VisionX Technologies, Inc. is seeking a highly motivated Cybersecurity and Compliance Officer to join our team. In this critical role, you will be responsible for ensuring the security and integrity of our IT systems and data.As a Cybersecurity and Compliance Officer, you will develop and implement IT security policies and procedures, conduct...

  • Senior Specialist Cybersecurity Compliance

    3 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Banque Saudi Fransi Full time

    Senior Specialist Cybersecurity ComplianceThe Senior Specialist Cybersecurity Compliance is responsible for ensuring that the bank's cybersecurity operations, policies, and controls comply with regulatory requirements and standards. The role focuses on implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring...

  • Senior Cybersecurity Compliance Expert

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia BSF Full time

    Job SummaryThe Senior Specialist Cybersecurity Compliance is responsible for ensuring the bank's cybersecurity operations, policies, and controls comply with regulatory requirements and standards. This role focuses on implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring alignment with frameworks such as...

  • Cybersecurity Regulatory Compliance Officer

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia BSF Full time

    Cybersecurity Compliance Job DescriptionThe Senior Specialist Cybersecurity Compliance is responsible for ensuring the bank's cybersecurity operations comply with regulatory requirements and standards. This includes implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring alignment with relevant...

  • Cybersecurity Compliance Specialist Lead

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia BSF Full time

    About the RoleThe Senior Specialist Cybersecurity Compliance will be responsible for ensuring the bank's cybersecurity operations comply with regulatory requirements and standards. This includes implementing and monitoring cybersecurity compliance activities, supporting regulatory audits, and ensuring alignment with relevant frameworks.This role will also...

  • Cybersecurity Governance, Risk and Compliance Manager

    4 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Riyadh Air Full time

    About the CompanyRiyadh Air (RX), headquartered in the Saudi Capital, is the new national airline that's shaping the future of flying. It seeks to lead the aviation industry by transforming Saudi Arabia into a global aviation and trade hub – a digitally native airline that will connect the kingdom to more than 100 destinations.About the RoleAre you a...

  • Cybersecurity and Compliance Specialist

    6 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia Amazon Full time

    BASIC QUALIFICATIONS:- 3+ years of program or project management experience- 3+ years of working cross-functionally with tech and non-tech teams experience- 3+ years of defining and implementing process improvement initiatives using data and metrics experience- Bachelor's degreeThis role is a great opportunity for individuals who are passionate about...

  • Information Security Specialist

    1 day ago

    Riyadh, Ar Riyāḑ, Saudi Arabia QMet Arabia Cybersecurity Full time

    Direct message the job poster from QMet Arabia CybersecurityManaging Director, QSCert Middle East | Trusted Compliance & Cybersecurity Expert | Serving 500+ Businesses Across Saudi ArabiaCompany DescriptionQMet Arabia Cybersecurity specializes in providing consulting services in cybersecurity and management systems consultancy for both national and...

  • Cybersecurity GRC Manager

    4 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia NICE ONE | نايس ون Full time

    Job Description:We are searching for a dedicated and experienced individual to join our team as a Cybersecurity GRC Manager. This position provides an exceptional opportunity to lead our organization's Governance, Risk, and Compliance (GRC) initiatives in the cybersecurity domain. If you have a passion for protecting digital assets and ensuring compliance...

  • Manager of Cybersecurity Services

    5 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia leantech Full time

    Leantech is seeking a qualified cybersecurity professional to fill the role of Manager of Cybersecurity Services. This key position requires a strong background in managing cybersecurity compliance programs in the financial sector, with a focus on client onboarding and due diligence.The ideal candidate will have a proven track record of ensuring compliance...

  • Cybersecurity Risk Manager

    4 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia NICE ONE | نايس ون Full time

    About NICE ONE | نايس ونWe are a forward-thinking organization seeking an experienced Cybersecurity GRC Manager to lead our Governance, Risk, and Compliance initiatives in the cybersecurity domain. This role offers a unique opportunity to protect digital assets and ensure compliance with industry best practices.Key Responsibilities:Develop and maintain...

  • Cybersecurity Section Manager

    3 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia تراحم Full time

    The Cybersecurity Section Manager leads a team of cybersecurity professionals in planning and executing security operations. This role ensures the protection of the organization's information assets and infrastructure by implementing security strategies, managing technologies, responding to incidents, and maintaining compliance. The manager provides...

  • Security Operations Manager

    22 hours ago

    Riyadh, Ar Riyāḑ, Saudi Arabia QMet Arabia Cybersecurity Full time

    As an Information Security Specialist at QMet Arabia Cybersecurity, you will have the opportunity to work on a variety of projects that align with your interests and strengths. Our company specializes in providing consulting services in cybersecurity and management systems consultancy for both national and international standards and frameworks.What You Will...

  • Security Management Specialist

    7 days ago

    Riyadh, Ar Riyāḑ, Saudi Arabia QMet Arabia Cybersecurity Full time

    Key ResponsibilitiesImplementing security measures to protect applications and dataManaging overall cybersecurity policies and proceduresOversight of information security management practicesMaintaining network security and data privacyThis is an on-site role requiring close collaboration with our cybersecurity team and clients.