Sr. Manager, Cybersecurity

Role Overview

Sr. Manager, Cybersecurity at SAFE Security. This role leads the cybersecurity and privacy program, developing and implementing security policies, managing incidents, and ensuring compliance with relevant regulations and standards.

Role Purpose

Lead the design, implementation, and oversight of SAFE's cybersecurity and privacy program. Establish policies, procedures, and incident response capabilities that align with business objectives and industry best practices. Ensure organizational compliance with security and privacy regulations and standards, and provide strategic direction on emerging threats.

Key Responsibilities

Program Development & Strategy

• Develop and implement cybersecurity and privacy programs that align with business objectives and industry best practices.
• Develop and implement security and privacy policies and procedures, including data protection policies, access controls, and incident response plans.
• Stay up to date on emerging cybersecurity and privacy threats and trends and develop strategies to address them.
• Leverage understanding of cybersecurity regulatory requirements, industry standards, and the national cybersecurity strategy to develop and enhance the SAFE cybersecurity strategy, governance model, and controls.

Risk & Vulnerability Management

• Conduct risk assessments and vulnerability assessments to identify potential security and privacy risks and develop mitigation strategies.
• Identify systemic security issues based on the analysis of vulnerability and configuration data.
• Perform deep analysis of captured malicious code, including malware forensics.
• Demonstrate knowledge of information technology supply chain security and supply chain risk management policies, requirements, and procedures to identify relevant threats and vulnerabilities, assess the potential threat's impact, and develop mitigation plans.

Incident Response & Management

• Manage and oversee SAFE security and privacy incident response program, including incident reporting, investigation, and resolution.
• Ensure robust threat monitoring and incident management policies and procedures are in place.
• Demonstrate knowledge of incident categories, incident responses, and timelines for responses.

Compliance & Audit

• Ensure compliance with relevant security and privacy regulations and standards such as CITC, NCA, SAMA, and SDAIA.
• Conduct security compliance audits to verify that information processes meet the security criteria, requirements, policy, standards, and procedures.

Stakeholder Management & Support

• Manage relationships with external vendors and partners to ensure compliance with security and privacy requirements.
• Provide guidance and support to employees on security and privacy issues, including training and awareness.
• Demonstrate knowledge of data privacy and protection infrastructure, standards, and procedures and engage with stakeholders to raise organizational data privacy and protection capability and awareness.

Reporting & Metrics

• Monitor and report on key cybersecurity and privacy metrics, including vulnerability assessments, security incidents, and compliance status.
• Demonstrate knowledge of analytic tools and techniques for network traffic, system artifacts, and infrastructure logs.

Team Leadership & Development

• Create strategy, goals, and plans for the team in alignment with SAFE goals.
• Set priorities and manage workload for self and staff.
• Recognize training needs and ensure that staff gain needed skills.
• Create a team identity and shared purpose among team members.
• Articulate the vision for the future in a way to motivate others to action.
• Find effective ways to empower individuals and help them succeed.
• Focus on developing, coaching, and mentoring talent to enhance skills, knowledge, and abilities to improve individual and organizational performance.

General

• Perform additional tasks as assigned.

Qualifications & Experience

• Minimum bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 10+ years of experience in various roles, including at least 3 years in a leadership role.
• CISSP, CISM, or CISA certifications are a plus.

Skills & Competencies

Functional Expertise

• Threat Analysis: Knowledge of structure, approach, and strategy of exploitation tools such as sniffers and keyloggers, and techniques such as gaining backdoor access, collecting and exfiltrating data, and conducting vulnerability analysis of other systems in the network. Skill in deep analysis of captured malicious code, including malware forensics.
• Vulnerability Assessment: Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
• Data Privacy and Protection: Knowledge of data privacy and protection infrastructure, standards, and procedures.
• Incident Management: Knowledge of incident categories, incident responses, and timelines for responses.
• Cyber Risk Management: Knowledge of information technology supply chain security and supply chain risk management policies, requirements, and procedures.
• Cyber Security Strategy & Governance: Understanding of cybersecurity regulatory requirements, industry standards, and the national cybersecurity strategy.
• Cyber Security Audit & Compliance: Ability to conduct security compliance audits to verify that information processes meet security criteria, requirements, policy, standards, and procedures.
• Data Analysis: Knowledge of analytic tools and techniques for network traffic, system artifacts, and infrastructure logs.

Core Competencies

• Dependability: Self-driven and proactive. Pursue goals with persistence and stamina. Work on tasks thoroughly, ensuring accuracy and meeting standards. Maintain high levels of quality and effectiveness of work outputs and achieve outstanding results.
• Collaboration: Collaborate constructively with people at all levels across the organization. Help colleagues and remain available to the team. Deliver on team commitments. Trust the guidance and direction of colleagues and senior members of the team.
• Analytical Thinking: Examine, evaluate, and analyze different types of information objectively. Spot trends and patterns. Establish key facts clearly and interpret numerical data effectively. Provide insights and identify ways to improve things. Trust intuition about which methods will work best.
• Effective Communication: Listen attentively and seek to understand before being understood. Explain things clearly, articulate, and present information effectively and confidently. Challenge ideas effectively and present persuasive arguments by presenting a strong case.

Leadership Competencies

• Driving Success: Translate SAFE vision and goals into clear, specific, and achievable objectives. Take control of projects, leading on key tasks and monitoring others to ensure they fulfill their roles effectively. Demonstrate belief in and personal commitment to SAFE vision and mission. Fulfill commitments while maintaining high levels of productivity and output for self and team.
• Building Relationships: Build an understanding of who key stakeholders are, including shareholders, their needs, drivers, and constraints. Develop common understanding across widely competing needs. Interact well with others, quickly establishing rapport and maintaining useful relationships with internal and external stakeholders for the benefit of the organization.
• Engaging Individuals: Create a team identity and shared purpose among team members. Articulate the vision for the future in a way to motivate others to action. Find effective ways to empower individuals and help them succeed. Focus on developing, coaching, and mentoring talent to enhance skills, knowledge, and abilities to improve individual and organizational performance.