cybersecurity manager

Soar Software Development Company

<div>About us:
Soar is a global fintech startup that specializes in financing and investment. Currently headquartered in Saudi Arabia, Soar is growing throughout the region with a mission to help people achieve their financial goals with innovative financial and property investment solutions and tools through its multi-purpose platform, designed to offer a simple and seamless user experience.
Role Summary:
You will be the architect of our &quot;Security by Design&quot; philosophy. Your primary mandate is to embed security into every stage of our software development lifecycle&mdash;from the first line of code to production deployment. You will leverage AI-driven tools to automate threat detection and vulnerability management, ensuring that our speed of innovation is matched by our speed of defense.
Key Responsibilities:
1. Secure Software Development Life Cycle (SSDLC)
Shift Left Security: Champion the integration of security early in the development phase. Lead Threat Modeling sessions during the design phase of new features to identify risks before code is written. CI/CD Pipeline Security: Automate security gates within our deployment pipelines. Implement and manage SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) tools. Secure Coding Standards: Establish and enforce secure coding guidelines (OWASP Top 10, SANS 25) for our engineering team. Conduct regular code reviews and security training for developers.
2. AI &amp; Automation Integration
AI-Enhanced AppSec: Utilize AI-powered code analysis tools to reduce false positives in vulnerability scanning and provide auto-remediation suggestions to developers. Automated SOAR: Build and maintain a Security Orchestration, Automation, and Response (SOAR) framework. Create playbooks that automatically isolate compromised assets or block malicious IPs without human intervention. Predictive Defense: Deploy AI-driven network monitoring to detect behavioral anomalies in our self-hosted infrastructure (e.g., zero-day attacks or lateral movement) that traditional rules might miss.
3. Infrastructure &amp; Network Security (Self-Hosted)
Hardening: Oversee the security hardening of our self-hosted environments (Kubernetes clusters, Docker containers, and Linux servers). Traffic Analysis: Manage WAF (Web Application Firewall) rules and DDoS protection layers, ensuring high availability for our customers. Secrets Management: Enforce strict secrets management (e.g., Vault) to ensure no credentials are hardcoded in the application.
4. GRC (Governance, Risk &amp; Compliance)
Regulatory Adherence: Ensure our SSDLC and operations strictly adhere to SAMA&rsquo;s Cybersecurity Framework and NCA&rsquo;s Essential Cybersecurity Controls (ECC). Audit Readiness: Automate evidence collection for compliance audits to minimize manual overhead. Data Residency: Ensure all AI processing and data storage complies with the Personal Data Protection Law (PDPL), keeping critical data within KSA.
Qualifications
Education &amp; Experience:
Experience: 6+ years in Cybersecurity, with specific experience in Application Security or DevSecOps.
Managerial: Proven ability to lead technical initiatives and influence engineering teams.
Tech Stack: Deep experience with CI/CD tools (Jenkins, GitLab, GitHub Actions), Container Security (Kubernetes/Docker), and Python/Go scripting.
Technical Skills:
SSDLC Mastery: Expert knowledge of integrating security tools (SonarQube, Checkmarx, Burp Suite, etc.) into a pipeline.
AI/Automation: Experience implementing AI-based security tools (e.g., Darktrace, Vectra, or AI-enabled SIEMs) and writing automation scripts.
Regulatory Knowledge: Strong understanding of SAMA regulations regarding application security and data protection.
Nice to have skills (Certifications):
CSSLP (Certified Secure Software Lifecycle Professional) - Highly Preferred
CISSP (Certified Information Systems Security Professional)
OSCP (Offensive Security Certified Professional)</div>

Cybersecurity Manager

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Manager
Job Description &amp; Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
Enhancing your leadership style, you motivate, develop and inspire others to deliver quality. You are responsible for coaching, leveraging team member&rsquo;s unique strengths, and managing performance to deliver on client expectations. With your growing knowledge of how business works, you play an important role in identifying opportunities that contribute to the success of our Firm. You are expected to lead with integrity and authenticity, articulating our purpose and values in a meaningful way. You embrace technology and innovation to enhance your delivery and encourage others to do the same.
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:
<ul><li>Analyse and identify the linkages and interactions between the component parts of an entire system.
</li><li>Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion.
</li><li>Partner with team leadership to ensure collective ownership of quality, timelines, and deliverables.
</li><li>Develop skills outside your comfort zone, and encourage others to do the same.
</li><li>Effectively mentor others.
</li><li>Use the review of work as an opportunity to deepen the expertise of team members.
</li><li>Address conflicts or issues, engaging in difficult conversations with clients, team members and other stakeholders, escalating where appropriate.
</li><li>Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.
</li></ul>Minimum years experience required
Additional application instructions
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Professional Courage {+ 13 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
No
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, Cybersecurity Identity and Access Management - Manager

ETIC, OT Security Manager

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Manager
Job Description &amp; Summary
At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
 
 
As a cybersecurity generalist at PwC, you will focus on providing comprehensive security solutions and experience across various domains, maintaining the protection of client systems and data. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.
Description
<div><div><div><div>The Digital &amp; Cyber Business Unit brings together deep technology expertise and bold thinking to help organizations thrive in a connected, data-driven world. We support clients in reimagining how they operate, serve, and grow&mdash;by harnessing the power of digital products, emerging tech, cloud, data, and cyber resilience.
 
 
Whether shaping enterprise-wide transformation or enabling targeted innovation, we work at the intersection of strategy, technology, and trust&mdash;delivering scalable solutions that empower clients to move faster, think smarter, and lead with confidence.
</div></div><div><div>Job Summary
</div><div>A career in our Cyber Secrurity &amp; Digital Trust technology services will allow you to work under the supervision of cyber security leadership within the Digital &amp; Cyber Consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cyber security positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.
</div></div><div><div>Roles &amp; Responsibilities
</div><div>Meaningful work you&rsquo;ll be part of:
Project &amp; Engagement Management:
 
Lead end-to-end delivery of AI-in-Cyber initiatives&mdash;from assessment and strategy to design, build, and optimization of use cases. Oversee project plans, budgets, risks, resources, and quality, ensuring measurable impact and stakeholder satisfaction.
Business Development:
 
Drive opportunity creation and management, including lead generation, solution design, demos, proofs of value, proposals, statements of work, and contracting. Collaborate across teams to shape offerings that align with client needs and PwC standards.
Strategic Leadership:
 
Define and implement enterprise strategies for AI-augmented cyber defense, connecting business value to measurable outcomes. Establish governance frameworks for responsible and secure AI use in SOC and incident response environments.
Risk &amp; Policy (Usage-Level):
 
Develop and enforce policies for AI-assisted cybersecurity operations&mdash;covering data handling, access control, approvals, activity logging, and human-in-the-loop (HIL) reviews. Align with global standards including NIST AI RMF, ISO/IEC 42001, ISO/IEC 23894, ENISA AI Threat Landscape, and OWASP Top 10 for LLM Applications, while ensuring compliance with privacy and regional regulations.
Stakeholder Engagement:
 
Advise CISOs, SOC leaders, and executives on AI-in-Cyber strategy and implementation. Translate technical insights into tangible business outcomes, strengthening stakeholder trust and alignment.
What you&rsquo;ll do:
1) Threat Intelligence, Hunting &amp; Incident Response Augmentation:
 
Automate cyber threat intelligence ingestion, normalization, and enrichment by linking entities and extracting TTPs mapped to MITRE ATT&amp;CK. Convert intelligence into actionable detections and hunting use cases with measurable precision and recall. Enhance incident response through orchestrated workflows&mdash;covering scoping, evidence handling, executive communication, and retrospectives&mdash;supported by AI copilots and intelligent agents.
2) Secure Use of AI in Cyber Operations (Scope-Limited Guardrails):
 
Implement strict data governance through minimization, labeling, and DLP controls across retrieval and case documentation. Maintain audit trails, approval flows, and role-based access for sensitive operations. Apply safety measures including content filtering, grounding checks, and human validation for high-risk actions. Utilize private networking, managed encryption keys, and secured environments for AI components.
Ensure alignment with frameworks such as NIST AI RMF, ISO/IEC 42001/23894, ENISA AI Threat Landscape, and OWASP LLM Top 10. Adhere to privacy and regional obligations&mdash;including GDPR, CCPA, KSA SDAIA PDPL/NCA ECC, and UAE TDRA/CSC&mdash;while ensuring all SOC data and AI operations meet PwC&rsquo;s global trust and compliance standards.
</div></div><div><div>Skills and Competencies
</div><div><div><ul><li>Strong Python and data engineering; Git-based CI/CD and testing.
</li></ul></div><div><ul><li>Hands-on expertise in one or more vendor tracks above (Microsoft, Google, Palo Alto Networks).
</li></ul></div><div><ul><li>Experience building LLM/RAG apps integrated into SOC workflows; comfort with prompt and retrieval evaluation.
</li></ul></div><div><ul><li>Excellent written and verbal communication; ability to explain complex analytics and risks to non-technical stakeholders and executives.
</li></ul></div></div></div></div></div>Minimum years experience required
Additional application instructions
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Coaching and Feedback, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Professional Courage {+ 13 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Available for Work Visa Sponsorship?
Government Clearance Required?
Job Posting End Date</div>

ETIC, Cybersecurity - AI Engineer - Manager

MDS for Computer Systems (MDS CS)

<div>
 Date: Dec 23, 2025
 
 
 Location:
 
 
 Riyadh, SA
 
 
 Company: MDS-CS Managed Services
 
 
 Req ID: 2795
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Lead and manage cybersecurity consulting projects for various clients.
 </li>
 <li>
 Assess cybersecurity maturity levels, identify vulnerabilities, and evaluate risks.
 </li>
 <li>
 Develop cybersecurity strategies, policies, and procedures aligned with frameworks such as NIST, ISO 27001, CIS, SAMA and NCA.
 </li>
 <li>
 Conduct risk assessments, security audits, and gap analyses.
 </li>
 <li>
 Support implementation of cybersecurity controls and security solutions.
 </li>
 <li>
 Prepare professional reports, executive summaries, and presentations.
 </li>
 <li>
 Provide expert advisory to stakeholders and guide technical teams when required.
 </li>
 <li>
 Ensure compliance with local regulations and industry standards.
 </li>
 <li>
 Participate in cybersecurity awareness and capability-building initiatives.
 </li>
 </ul>
</div>

Senior Consultant - Cybersecurity

<div>W ABB pomagamy przemysłowi wyprzedzać konkurencję - działać sprawniej i ekologicznie. U nas postęp to standard &ndash; dla Ciebie, Twojego zespołu i całego świata. Jako globalny lider dajemy Ci to, czego potrzebujesz, by to osiągnąć. Nie zawsze będzie łatwo, rozw&oacute;j wymaga determinacji. Ale w ABB nigdy nie będziesz działać sam. Zarządzaj tym, co porusza świat.
Stanowisko to podlega:
Local Service Operations Manager<div> 
Your role and responsibilities (Mandatory) 
 
In this role, you will leads the digital solution engineering either functional or technical aspects with different stakeholders to develop, implement and facilitate successful on-boarding digital solutions and adoption of digital platform and solutions into the customer business environment together with its operations and maintenance. Provides consultative assistance in supporting the use of products with the goal of improving productivity and efficiency. Tests and troubleshoots the final system setup.
 
 
The work model for the role is: {onsite/hybrid/remote} {insert Linkedin #} 
 
This role is contributing to the PAEN Executions Team in Saudi Arabia. 
 
You will be mainly accountable for:<ul><li>
Testing and troubleshooting the final system setup and ensuring its successful rollout through training and retraining the customers to understand the software and its benefits and providing subsequent ongoing support and services.</li><li>
Exhibits an understanding of how to best configure and implement software.</li><li>
Confirms all resources are in place to implement software on-time and on budget. Provides ongoing support and services.</li><li>
Supporting customers right from the sales cycle through the go-live, post-implementation review, and subsequent follow-up stages.</li></ul> 

Our Team Dynamics
Our teams support each other, collaborate, and never stop learning. Everyone brings something unique, and together we push ideas forward to solve real problems. Being part of our team means your work matters - because the progress we make here creates real impact out there.</div><div> 
Qualifications for the role (Mandatory)<ul><li>
Bachelor&rsquo;s degree in information systems, Computer Engineering, Cybersecurity, or related field.</li><li>
Overall 10+ years of experience with 7+ years of experience in OT/ICS environments, and at least 5 years in OT cybersecurity.</li><li>
Strong understanding of NCA OTCC controls and their implementation in industrial environments.</li><li>
Proven track record in managing complex engineering and cybersecurity projects.</li><li>
Relevant Cybersecurity Certifications are a plus (e.g. CISSP, GICSP, CISM, ISA/IEC 62443)</li><li>
Strong understanding of NCA OTCC &amp; IEC62443 controls and their practical implementation in industrial settings.</li><li>
Deep knowledge of ICS technologies: DCS, PLCs, SCADA, Historians, OPC, Industrial Networks.</li><li>
Hands-on experience with OT firewalls, IDS/IPS, NAC, remote access controls, and endpoint security for OT.</li><li>
Expertise in network architecture, segmentation (DMZ, Purdue Model), and secure remote access.</li><li>
Understanding of IT/OT convergence and cloud-integrated industrial cybersecurity solutions.</li><li>
Strong leadership, communication, and stakeholder management.</li><li>
Ability to manage multidisciplinary teams and complex project environments.</li><li>
Problem-solving mindset with a structured and analytical approach.</li><li>
High integrity, professionalism, and attention to detail.</li></ul></div><div>
We empower you to take the lead, share bold ideas, and shape real outcomes. You&rsquo;ll grow through hands-on experience, mentorship, and learning that fits your goals. Here, your work doesn&rsquo;t just matter, it moves things forward<h2 class="jobSectionHeader">
Benefits
</h2>We invest in our people with benefits that go beyond the basics because your future matters.<h2 class="jobSectionHeader">
More about us
</h2>Join us. Be part of the team where progress happens, industries transform, and your work shapes the world. Run What Runs the World.</div>
Doceniamy r&oacute;żnorodność doświadczeń. Czy to może być Twoja historia? Aplikuj już dziś lub odwiedź stronę www.abb.com, aby dowiedzieć się więcej o nas i poznać wpływ naszych rozwiązań na całym świecie.</div>

Cyber Security Project Lead

DUBAI PROPERTIES GROUP LLC

An opportunity has arisen for an Assistant Manager – Cyber Security, Assurance & Risk to join Dubai Holding Asset Management. The main duties and responsibilities of this role:<ul><li>The role holder is responsible for supporting the implementation and monitoring of information security governance and compliance activities across DHAM and its entities.</li><li>This includes assisting with policy development, audits, awareness initiatives, and governance frameworks to ensure alignment with best practices (e.g., ISO 27001) and business requirements.</li><li>The role focuses on coordinating activities, maintaining documentation, and providing operational support to help strengthen the group’s overall</li></ul>Cybersecurity & Risk Management<ul><li>Support the IT and cybersecurity risk management framework, ensuring alignment with organizational objectives and regulatory requirements.</li><li>Identify, evaluate, and monitor technology-related risks across infrastructure, applications, cloud, and third-party vendors.</li><li>Work with stakeholders to implement mitigation measures, controls, and risk treatment plans.</li><li>Maintain the IT Risk Register, track remediation actions, and escalate risks/issues in line with governance processes.</li><li>Coordinate and conduct periodic risk assessments and workshops with business and IT stakeholders.</li><li>Track and report Key Risk Indicators (KRIs) and prepare risk dashboards and reports for management review.</li></ul>Assurance & Compliance<ul><li>Conduct assurance reviews and internal audits of security controls, IT processes, and regulatory compliance (e.g., ISO 27001, NIST, GDPR, UAE NESA, SCA).</li><li>Support internal and external audit engagements, ensuring timely closure of findings and recommendations.</li><li>Monitor assurance activities such as user access reviews, control checks, and compliance schedules.</li><li>Report on compliance status, exceptions, and remediation plans to management.</li><li>Maintain documentation and evidence to support governance, risk, and compliance (GRC) requirements.</li><li>Liaise with IT/security teams and vendors on incident reporting, documentation, and follow-up.</li></ul>Policy, Governance & Awareness<ul><li>Support the development, review, and enforcement of IT and cybersecurity policies, standards, and procedures.</li><li>Contribute to the implementation and continuous improvement of the IT Governance Framework, aligning with ISO 27001 and other standards.</li><li>Promote security awareness through training, communications, and awareness sessions across all business units.</li><li>Participate in governance and risk forums and support management reporting.</li></ul>Disaster Recovery (DR) & Business Continuity (BCM)<ul><li>Support the development, maintenance, and testing of Disaster Recovery (DR) and Business Continuity (BC) plans.</li><li>Coordinate DR/BC test planning, scheduling, execution, and documentation of results.</li><li>Track corrective actions, ensure remediation, and maintain centralized DR/BC documentation for audits and management reporting.</li></ul>Operational & Project Support<ul><li>Support group-wide information security, governance, and compliance initiatives.</li><li>Assist in managing IT governance and security projects, including coordination with vendors and service providers.</li><li>Gather data to identify gaps, support process improvements, and escalate issues where needed.</li><li>Track and report progress on information security and governance initiatives to senior management.</li></ul>

Assistant Manager – Cyber Security, Assurance & Risk

Search 10000+ Cybersecurity manager jobs near you this January. New roles added regularly across leading industries. Apply today.