Senior Cyber and Information Risk Officer

About the role

The Senior Cyber and Information Risk Officer will lead the development and implementation of cloud and information security practices across the organization. This role ensures that security controls meet global standards and that all stakeholders understand and adhere to risk policies.

Key responsibilities

• Develop and coordinate cloud development practices with all business units.
• Roll out the organization’s Information Security Framework.
• Assess and improve SecDevOps technologies and processes for continuous compliance.
• Analyze global threat trends to enhance existing controls.
• Disseminate technology risk documentation and ensure stakeholder comprehension.
• Define and configure technical standards and tools such as DAST and SAST.
• Collaborate with IT & Cyber teams on technical controls, RFPs, vendor selection, and project implementation.
• Deliver cyber and information security training and awareness for IT staff.
• Classify information assets, conduct risk assessments, and monitor compliance.
• Oversee penetration testing, internal and external vulnerability assessments, and remediation of unauthorized access.

Required profile

• Bachelor’s degree in Information Technology or a related field.
• 3‑6 years of IT experience in a leading regional or international bank, preferably in information security, cloud security, and SecDevOps.
• Professional cybersecurity risk certification preferred.
• Fluent in English and Arabic.
• Strong communication, presentation, and interpersonal skills.

Required skills

• Cloud development practices
• SecDevOps methodologies
• DAST and SAST tool configuration
• Penetration testing
• Vulnerability assessment (internal & external)
• ISO 27001, PCI DSS, COBIT frameworks
• Security software/hardware basic configuration