Manager - Cybersecurity, Application Security

Select how often (in days) to receive an alert:

Date: 7 Oct 2026

Custom Field 1: 701431

Location:

Riyadh, SA

Facility:
Others

Job Title:

Manager

Job Code: 701431

Grade: T1

Group:

-

Department:
Cybersecurity

The aim is to state the overall significance of the job from the organization's perspective.

The role exists to lead cybersecurity governance, risk, compliance, and protection activities across the assigned scope by setting direction, overseeing security controls, enabling regulatory alignment, and driving cybersecurity maturity. The role contributes to protecting Elm's information assets, digital services, and business operations by ensuring cybersecurity practices are implemented, monitored, and continuously improved in alignment with Elm's approved policies, procedures, strategic objectives, and applicable regulatory requirements.

This section describes the principal outputs required from the job.

• Lead the development and execution of cybersecurity plans, initiatives, and governance activities within the assigned scope.
• Ensure cybersecurity objectives are aligned with Elm's strategic priorities, business requirements, and regulatory expectations.
• Provide direction and guidance on cybersecurity policies, standards, procedures, and control requirements.

• Oversee cybersecurity risk assessments for systems, services, processes, and business initiatives.
• Validate key cybersecurity risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability.
• Drive risk treatment plans and follow up with stakeholders to ensure timely mitigation and effective risk reduction.

• Oversee the design, implementation, and effectiveness of cybersecurity controls across the assigned environment.
• Ensure compliance with applicable cybersecurity regulations, internal policies, and relevant standards.
• Review compliance gaps, remediation plans, and evidence to support audit readiness and management reporting.

• Provide cybersecurity advisory support to business and technical stakeholders on initiatives, projects, and services.
• Ensure cybersecurity requirements are embedded into solutions, processes, and business decisions from early stages.
• Balance business enablement with risk-based cybersecurity controls and practical implementation guidance.

• Oversee cybersecurity monitoring activities and ensure security events are reviewed, escalated, and handled appropriately.
• Coordinate with relevant teams during cybersecurity incidents to support investigation, containment, remediation, and reporting.
• Review incident outcomes and ensure lessons learned are translated into improvement actions.

• Oversee vulnerability management activities, including prioritization, remediation follow-up, and risk-based treatment.
• Monitor emerging cybersecurity threats and assess their potential impact on Elm's systems, services, and operations.
• Coordinate with system owners and technical teams to ensure timely closure of critical vulnerabilities and exposure areas.

• Build and maintain effective relationships with internal stakeholders, business owners, technology teams, and governance functions.
• Promote cybersecurity awareness and support the adoption of secure practices across the assigned scope.
• Facilitate alignment between cybersecurity requirements, business priorities, and operational delivery needs.

• Prepare and review cybersecurity dashboards and management updates covering risks, controls, compliance, incidents, and improvement plans.
• Analyze cybersecurity performance indicators to identify trends, gaps, and maturity improvement opportunities.
• Lead continuous improvement initiatives that enhance cybersecurity resilience, governance effectiveness, and operational readiness.
• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.

• Comply with all…