Cyber Security Manager - Identity Access Management

About Us

Abdul Latif Jameel United Finance Company is a closed joint stock company licensed by the Saudi Central Bank (SAMA) to operate in financial leasing, productive assets financing, consumer products financing, and real estate financing. We deliver a comprehensive range of Shariah-compliant financing solutions tailored for individuals and small to medium-sized enterprises (SMEs), including cash financing, vehicle financing (all types), heavy equipment, household and electronic appliances, as well as real estate financing. Our services are accessible through an extensive branch network across the Kingdom, complemented by initiatives such as Bab Rizq Jameel Financing programs, designed to empower entrepreneurs. Our mission is to establish ourselves as the premier financing destination for SMEs in Saudi Arabia.

Position Overview

We are seeking a highly skilled and strategic Cyber Security Manager – Identity and Access Management (IAM) to lead and enhance our organization’s identity governance, access control, and data protection initiatives. In this pivotal role, you will be responsible for developing and implementing robust IAM strategies that align with cybersecurity regulatory frameworks, ensuring that only authorized personnel have appropriate access to critical resources and sensitive data. Your leadership will be instrumental in safeguarding our digital infrastructure while maintaining compliance with internal policies and external regulations.

Key Responsibilities

The successful candidate will oversee the following core functions:

• IAM Strategy Development: Drive the creation and execution of comprehensive IAM strategies to strengthen our organizational security posture, ensuring strict regulation of access to resources and data for authorized personnel only.
• Data Protection Oversight: Establish and maintain advanced data protection controls to prevent unauthorized access to sensitive information, ensuring adherence to internal standards and regulatory mandates.
• Technology Leadership: Provide strategic direction and oversight for IAM and data protection technologies, empowering the administrative team to execute daily operations with precision and efficiency.
• Access Rights Governance: Lead regular access rights reviews to ensure alignment with corporate policies and compliance requirements, mitigating risks associated with identity management.
• Cross-Functional Collaboration: Partner with diverse business units to integrate IAM and data protection measures within the broader cybersecurity framework, fostering a culture of security awareness and accountability.
• Privileged Access Management (PAM): Develop and enforce governance frameworks for PAM, securing high-risk accounts and enforcing stringent controls over administrative access.
• Performance Metrics & Reporting: Establish and track Key Performance Indicators (KPIs) and security metrics to evaluate the effectiveness of IAM and data protection programs, enabling data-driven decision-making.

Key Activities

In this role, you will be actively engaged in the following activities:

• Team Supervision: Lead and mentor the administrative team to ensure the effective implementation of IAM technologies, providing guidance and support as needed.
• Authority Matrix Implementation: Collaborate with business units to enforce the Authority Matrix across critical applications, ensuring role-based access controls are consistently applied.
• Access Reviews: Plan and execute regular access rights reviews, ensuring they are conducted thoroughly and in compliance with organizational policies.
• Regulatory Compliance: Ensure all IAM and data protection initiatives adhere to relevant laws, regulations, and industry standards.
• Policy Consultation: Review and consult on IAM-related policies to ensure alignment with evolving organizational and regulatory requirements.
• Risk-Based Access Evaluation: Assess critical access requests through a risk-driven approach, balancing operational needs with security imperatives.
• Audit & Monitoring: Ensure user activities and audit logs are consistently aligned with established security controls and compliance frameworks.
• Data Protection Protocols: Continuously evaluate and enhance data protection protocols to maintain alignment with internal policies and regulatory standards.
• PAM Solution Management: Oversee the implementation of PAM solutions to safeguard privileged credentials and monitor high-risk user sessions in real time.
• Reporting & Analytics: Develop and present relevant KPIs and security metrics to provide transparency into the health, compliance, and performance of identity and information security operations.

Qualifications & Experience

To excel in this role, candidates must meet the following criteria:

• Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Certifications: Professional certifications such as Certified Information Systems Security Professional (CISSP) are highly desirable. IAM-specific certifications, including Certified Identity and Access Manager (CIAM), are a strong asset.
• Experience: Minimum of five years of progressive experience in cybersecurity, with a strong focus on Identity and Access Management, data protection, or related fields.

If you are a strategic thinker with a passion for cybersecurity and a proven track record in IAM governance, we invite you to apply and contribute to our mission of delivering secure, Shariah-compliant financial solutions to our valued customers.