Manager - Cybersecurity Governance

at  Qiddiya Investment Company

Qiddiya Investment Company is at the forefront of innovative real estate and entertainment developments in Saudi Arabia. We are currently seeking a dedicated and experienced professional to join our team as the Manager - Cybersecurity Governance. In this role, you will be responsible for establishing and managing a robust cybersecurity governance framework that ensures the protection of our information assets and compliance with regulatory standards.
Your expertise in governance will be critical in shaping our cybersecurity strategies and fostering a culture of security awareness across the organization.

REQUIREMENTS

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field
• 6+ years of experience in cybersecurity governance, risk management, or compliance roles
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001)
• Experience with risk assessment and management processes
• Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in the Governance of Enterprise IT (CGEIT) are preferred
• Excellent analytical and problem-solving skills
• Strong communication and interpersonal skills
• Ability to work collaboratively across teams and manage multiple priorities

• Develop and implement cybersecurity governance policies, frameworks, and controls aligned with organizational objectives and regulatory requirements
• Conduct risk assessments to identify and mitigate cybersecurity risks
• Ensure compliance with cybersecurity regulations, standards, and best practices
• Collaborate with IT and security teams to integrate cybersecurity governance into overall enterprise risk management
• Monitor and report on the effectiveness of cybersecurity governance initiatives and recommend improvements
• Provide training and awareness programs for employees on cybersecurity governance and best practices
• Stay informed about emerging threats, regulations, and trends in cybersecurity governance
• Engage with external stakeholders, including regulators and auditors, as necessary