IT & Cyber Security Manager

IT & Cyber Security Manager – Lead Strategic Technology and Security Initiatives

Are you a visionary IT leader with a deep expertise in cybersecurity and a passion for driving operational excellence? We are seeking a dynamic and results-driven IT & Cyber Security Manager to spearhead our technology strategy, fortify our cybersecurity posture, and optimize IT infrastructure to support our mission-critical operations. This role is ideal for an experienced professional who thrives at the intersection of innovation, security, and business growth.

In this pivotal position, you will serve as the architect of our IT and cybersecurity frameworks, ensuring alignment with global standards while addressing the unique challenges of an industrial or manufacturing environment. Your leadership will be instrumental in shaping a resilient, scalable, and compliant IT ecosystem that safeguards our digital assets and empowers cross-functional teams to achieve their objectives.

Key Responsibilities

As the IT & Cyber Security Manager, your responsibilities will encompass a broad spectrum of strategic and operational duties:

• Leadership and Team Development: Direct the IT team with a focus on setting clear objectives, allocating tasks efficiently, and fostering a culture of accountability. Oversee on-call rotations, performance evaluations, and coverage for leave and critical incidents to ensure seamless operations.
• Strategic Technology Advisory: Provide executive management with expert guidance on technology investments, evaluating build-vs-buy decisions, licensing models, and total cost of ownership (TCO) to maximize ROI and operational efficiency.
• Procurement and Vendor Management: Lead the technology evaluation and procurement process, from requirements gathering and RFP authoring to vendor shortlisting, NDA coordination, and proof-of-concept demonstrations. Collaborate with stakeholders to ensure seamless integration and alignment with business needs.
• Technical Due Diligence: Conduct rigorous technical assessments, including deployment model verification, sizing validation with independent quotations, licensing/entitlement analysis, and security evaluations of third-party components to mitigate risks and ensure compliance.
• Vendor and Budget Oversight: Manage relationships with ISPs, hosting providers, and contractors, negotiating contracts, enforcing SLAs, and meticulously planning and controlling the IT budget to optimize resource allocation.
• Process Optimization: Document, standardize, and continuously refine cross-departmental business processes to enhance efficiency, reduce redundancy, and drive operational excellence.

Qualifications and Skills

To excel in this role, you must possess a robust blend of technical expertise, leadership acumen, and a commitment to cybersecurity best practices:

• Education: A Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent proven experience.
• Experience: At least 10 years of progressive IT experience with a strong focus on cybersecurity, including hands-on ownership of a security program. Experience in an industrial or manufacturing environment is highly valued, with defense-sector or security-sensitive roles being a significant advantage.
• Leadership: Demonstrated ability to lead and mentor a small technical team, fostering a collaborative and high-performing environment.
• Language Proficiency: Fluent in both Arabic and English, with the ability to communicate effectively at all levels of the organization.
• Cybersecurity Expertise: Proven knowledge of security frameworks such as ISO 27001, IEC 62443, NIST CSF, and NCA ECC. Specialized skills in IAM/SSO/MFA design, SIEM operation, vulnerability management, penetration testing, and incident response leadership.
• Technical Proficiency: Strong working knowledge of IT/OT network segmentation, Microsoft 365/Entra governance, and data loss prevention (DLP) strategies. Familiarity with Linux, Windows, and networking fundamentals to effectively direct technical specialists.
• Regulatory Compliance: In-depth understanding of Saudi regulatory requirements, including PDPL, NCA ECC, GAMI, ZATCA e-invoicing, GOSI, and WPS, ensuring alignment with local and international standards.
• Vendor and Financial Management: Experience in vendor relationship management, contract negotiation, and budget planning to optimize IT expenditures and resource utilization.

While not mandatory, the following certifications will be highly regarded:

• Security Certifications: CISSP or CISM.
• Governance Certifications: ISO 27001 Lead Implementer, ITIL Foundation, or PMP.

Join our team and play a crucial role in shaping the future of our IT and cybersecurity infrastructure. Your expertise will not only drive technological advancement but also ensure the security and resilience of our operations in a dynamic and evolving landscape.