Information Security Risk Assessment Manager

Information Security Risk Assessment Manager – Driving Enterprise-Wide Cybersecurity Excellence

Join our dynamic Cybersecurity/Risk team as an Information Security Risk Assessment Manager in Riyadh, where you will play a pivotal role in safeguarding our organization’s critical information assets through strategic risk management, threat modeling, and compliance-driven assessments. This leadership position demands a proactive, analytical mindset and a commitment to elevating our cybersecurity posture in alignment with global best practices and regional regulatory frameworks.

As the cornerstone of our cybersecurity risk management program, you will lead comprehensive risk assessments, develop cutting-edge methodologies, and collaborate across IT, business units, and regulatory stakeholders to mitigate vulnerabilities before they escalate. Your expertise will ensure that our infrastructure, systems, networks, and data are fortified against evolving cyber threats while driving continuous improvement in our security controls and governance.

Key Responsibilities

In this strategic role, your responsibilities will span the entire lifecycle of cybersecurity risk management, from proactive threat identification to post-assessment mitigation planning. Key duties include:

• Strategic Risk Assessment Leadership: Conduct rigorous, risk-based cybersecurity assessments that align with service-level agreements (SLAs) and enterprise-wide security objectives. Leverage industry-leading frameworks to identify policy gaps, vulnerabilities, and emerging risks across IT systems, networks, and data assets. Provide actionable recommendations to strengthen security controls and mitigate identified threats.
• Threat Modeling & Proactive Defense: Lead detailed cybersecurity threat modeling initiatives for IT projects, new technologies, and existing systems—ensuring assessments are conducted at critical stages (pre-launch, post-change, and periodic reviews). Document findings in a centralized risk register, prioritizing threats to our most sensitive