Manager, Digital Forensics & Incident Response

Job Purpose

Lead digital forensics and incident response efforts to proactively identify, mitigate, and remediate cyber threats, fortifying Saudi National Bank’s (SNB) cybersecurity stance.

Key Responsibilities

• Implement and oversee Information Security Risk and Identity Access Management (IAM) governance, ensuring compliance with policies and procedures.
• Adhere to SNB’s Anti-Money Laundering (AML)/Counter-Terrorism Financing (CTF) policy and all relevant SAMA regulations, including account opening and Customer Due Diligence (CDD).
• Manage and coordinate SNB’s response to cyber incidents, ensuring timely containment, mitigation, and recovery.
• Oversee breach scoping, response planning, and eradication strategies, aligning with internal protocols and business priorities.
• Supervise digital evidence collection, preservation, and analysis across diverse environments.
• Lead malware analysis and reverse engineering efforts to uncover attack patterns and mechanisms, informing threat intelligence enrichment.
• Develop and implement automation workflows and SOAR playbooks to enhance efficiency and reduce manual intervention.
• Conduct post-incident reviews to evaluate effectiveness, identify gaps, and drive continuous improvement in processes and capabilities.
• Champion the development of response strategies that adapt to evolving threat landscapes and business needs.
• Manage the incident response and forensics team, setting clear goals and fostering a culture of accountability and collaboration.
• Ensure timely, accurate stakeholder communication during incidents, aligning with regulatory and business requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or a related field, or equivalent experience.
• 6-8 years of experience in Identity and Access Management or a related field.
• Proven expertise in incident response, digital forensics, malware analysis, and threat mitigation programs.
• Strong grasp of industry-standard IR methodologies (e.g., NIST, SANS) and their practical application across enterprise environments.
• Proven leadership skills, with the ability to provide calm direction during high-pressure incidents.