Senior Cyber and Information Risk Officer

About the role

The Senior Cyber and Information Risk Officer will lead the development and implementation of cloud security practices, information security frameworks, and SecDevOps processes across the organization. This role ensures that technology solutions meet global security standards and that risk documentation is clearly understood by all stakeholders.

Key responsibilities

• Develop and coordinate cloud development practices with all internal stakeholders.
• Roll out the organization’s Information Security Framework and monitor compliance.
• Assess existing SecDevOps technologies and processes, and guide ongoing security assessments.
• Analyze global threat trends to enhance existing controls.
• Disseminate technology risk documents and ensure stakeholder understanding.
• Define technical standards and configure tools such as DAST and SAST.
• Collaborate with IT & Cyber teams on technical controls, RFPs, vendor selection, and project progress.
• Support cyber and information security training and awareness programs for IT staff.
• Participate in asset classification, risk assessments, and vulnerability testing (internal and external).

Required profile

• Bachelor’s degree in Information Technology or a related field.
• 3‑6 years of IT experience in a leading regional or international bank, preferably in information security, cloud security, or SecDevOps.
• Professional cybersecurity risk certification preferred.
• Fluent in English and Arabic with strong communication and presentation skills.
• Knowledge of international security frameworks such as ISO 27001, PCI DSS, and CobIT.

Required skills

• SecDevOps
• DAST (Dynamic Application Security Testing)
• SAST (Static Application Security Testing)
• Cloud security concepts
• ISO 27001 framework
• PCI DSS compliance
• CobIT governance