Cyber Security Lead

Job Description

Join the dynamic Cigna Information Protection team and step into the role of Country Security Manager for the Kingdom of Saudi Arabia - a role that's as thrilling as it is pivotal We're searching for someone with a knack for aligning our organizational masterplan with the intricate tapestry of Saudi Arabia's business landscape. If you're a big-picture thinker with a flair for the finer details, we need you more than ever.

As the go-to sage of security, you'll be reporting to the Director of Information Protection for the Middle East & Africa - an individual who's as sharp as a tack. Your insights will be the secret sauce in our cyber risk mitigation strategies, and you'll strut your stuff as a trusted consultant to the head honchos of the region.
Your mission? To be the guardian of 'last mile execution' of our global Shared Services in the local Saudi context. You'll be nurturing capabilities, wrangling programs, and herding cats (metaphorically, of course) to cut down those pesky cyber and information security risks.
Now, let's talk about your superpower - local advocacy and authority in information security. You'll be schmoozing with business management and rubbing virtual elbows with regulatory wizards, clients, and even the mystical beings we call external partners. Your commitment to an all-encompassing approach that embraces a multitude of perspectives will make our strategy shine brighter than a supernova. And hey, whether you're a he, a she, or anything in between, we're all ears and can't wait to see your unique spin on things.

Key Responsibilities

**Serves as Country Security Manager for Saudi Arabia**: Forge strong relationships with local regulatory and government authorities to ensure compliance. Monitor security assurance in KSA infrastructure hosting environments.

**Lead Controls Assurance**: Define and track control testing and remediation risks for local business lines. Coordinate benchmarking exercises using Cigna Information Protection standards.

**Collaborate with Stakeholders**: Partner with business line and technology stakeholders to integrate risk management activities. Elevate cyber and information protection awareness.

**Manage 3rd Party Risks**: Work with Legal, Privacy, and Sourcing teams to assess and mitigate risks related to external partners.

**Public-Private Collaboration**: Assist in establishing collaboration opportunities in the cyber domain.

**Embed Secure Practices**: Work with local teams to implement secure development practices and minimize vulnerabilities in Agile/DevSecOps pipelines.

**Incident Response**: Guide incident responses, integrate forensics security investigations, and manage regulatory incident response reporting.
Report to Director of Information Protection, MEA
Desirable Qualifications
Minimum 5 years' experience in cyber security
Familiarity with KSA cyber security regulations
Preferably from financial services or insurance industry
Specialized cyber security certifications (CISM, CISA, CRISC)

About Cigna Healthcare
Cigna Healthcare, a division of The Cigna Group, is an advocate for better health through every stage of life. We guide our customers through the health care system, empowering them with the information and insight they need to make the best choices for improving their health and vitality. Join us in driving growth and improving lives.

Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.