30 Security Policies jobs in Jeddah

The Risk Management Manager is pivotal in safeguarding the organization’s assets and ensuring compliance with industry regulations. This role encompasses the identification, assessment, and mitigation of risks that could adversely affect the organization’s operations, reputation, or financial health. The manager will develop comprehensive risk management policies and procedures, conduct thorough risk assessments, monitor compliance, and provide strategic guidance to senior management. The objective is to ensure that risks are effectively controlled and aligned with organizational goals, industry standards, and regulatory requirements.

Responsibilities:

1. Oversee the procurement of insurance and develop risk management and compliance policies and procedures while managing claims and litigation processes.
2. Identify, analyze, and evaluate a wide range of potential risks, including operational, financial, strategic, compliance, and reputational risks.
3. Conduct regular risk assessments across various departments and projects to identify vulnerabilities.
4. Design and implement risk mitigation strategies, ensuring that appropriate actions are taken to minimize exposures.
5. Monitor and report on risk exposures and trends to senior leadership, providing insights for decision-making.
6. Evaluate and recommend insurance policies, including Property, Casualty, General Liability, and Workers’ Compensation, to ensure adequate coverage.
7. Collaborate with internal departments such as finance, operations, HR, safety, and legal to integrate risk management practices into daily operations.
8. Ensure compliance with relevant local and international regulations, including ISO 31000 and the COSO ERM Framework.
9. Facilitate risk management training sessions and workshops to foster a culture of risk awareness throughout the organization.
10. Educate and train staff on risk management practices and the importance of risk awareness in their roles.
11. Act as a liaison with external auditors and regulatory bodies to ensure compliance with risk management standards.
12. Support business continuity planning and crisis management initiatives to prepare for unforeseen events.
13. Review contracts and agreements to identify potential risks and liabilities associated with business operations.
14. Engage with external stakeholders, including insurers, auditors, and regulatory bodies, to maintain effective risk management practices.

Preferred Candidate:

1. Proven experience in risk management within the manufacturing sector.
2. Strong analytical and problem-solving skills.
3. Excellent communication and interpersonal skills.
4. Ability to work collaboratively in a team environment.
5. Detail-oriented with a focus on compliance and regulatory requirements.
6. Proficiency in risk management software and tools.
7. Strong leadership abilities to guide teams through risk management initiatives.
8. Ability to adapt to changing environments and emerging risks.
9. Commitment to continuous professional development in risk management practices.
10. Strong ethical standards and integrity in managing sensitive information.

Skills

• In-depth knowledge of risk management frameworks and methodologies.
• Experience with risk assessment tools and techniques.
• Strong understanding of manufacturing processes and operational risks.
• Excellent report writing and presentation skills.
• Proficient in data analysis and risk modeling.
• Familiarity with regulatory compliance standards in the manufacturing industry.
• Ability to lead training sessions and workshops on risk management.
• Strong negotiation skills for dealing with external stakeholders.

The Risk Management Manager is responsible for leading the identification, assessment, monitoring, and mitigation of risks across the organization in alignment with the company’s Enterprise Risk Management (ERM) framework. The role ensures compliance with laws, regulations, and governance requirements of a publicly listed entity in Saudi Arabia, including Capital Market Authority (CMA) guidelines and Tadawul listing rules. It plays a critical part in preparing accurate and transparent risk disclosures for the annual Board of Directors report, in line with best practice corporate governance standards.

• Lead the implementation, maintenance, and continuous improvement of the organization’s ERM framework, policies, and procedures.
• Embed risk management practices into strategic planning, operational execution, and decision-making across all business units.
• Conduct periodic reviews of the ERM framework to align with regulatory changes and industry best practices.
• Coordinate enterprise-wide risk identification workshops and assessments with business and functional leaders.
• Maintain a comprehensive risk register covering financial, operational, strategic, compliance, reputational, ESG, and cyber risks.
• Assess risks based on likelihood, impact, and velocity, prioritizing in line with risk appetite and tolerance levels.
• Partner with functions to develop and implement mitigation strategies, controls, and contingency plans.
• Monitor key risk indicators (KRIs) and escalate emerging risks to senior management and the Board Risk Committee.
• Conduct follow-up reviews to ensure mitigation actions are implemented effectively and on time.
• Ensure risk practices comply with CMA, Tadawul listing rules, and Saudi Corporate Governance Regulations.
• Support audits related to risk management and coordinate alignment with compliance and internal audit teams.
• Prepare regular risk reports for senior management and the Board Risk Committee.
• Lead preparation of the risk section of the Annual Board Report, ensuring compliance with disclosure requirements.
• Oversee the Business Continuity Plan (BCP) and Crisis Management Framework, including testing and maintenance.
• Coordinate crisis responses to minimize operational and reputational impacts.
• Deliver risk awareness training and workshops to promote a risk-aware culture.
• Build strong relationships with regulators, external advisors, and stakeholders while staying ahead of emerging risk trends.
• Represent the company in external forums on risk management and governance.

• Bachelor’s degree in Finance, Accounting, Economics, Business Administration, or a related field.
• Professional certifications preferred: CFA, FRM, CRM, CPA, or equivalent.
• 7–10 years of experience in risk management, internal audit, or financial control, preferably in a publicly listed company or regulated industry.
• Strong knowledge of CMA guidelines, Tadawul listing rules, and Saudi Corporate Governance Regulations.
• Expertise in Enterprise Risk Management (ERM) frameworks and risk assessment methodologies.
• Strong analytical and problem-solving skills with the ability to assess and prioritize risks.
• Proficiency in developing risk registers, KRIs, dashboards, and reports.
• Experience in business continuity planning and crisis management frameworks.
• Strong stakeholder management and relationship-building skills.
• Excellent presentation, reporting, and communication skills for Board and executive audiences.
• High level of integrity, discretion, and professionalism in managing sensitive information.
• Bilingual proficiency in Arabic and English (written and spoken).

Location : Dammam

Education: Bachelor’s degree in Information Technology, IT Security, Computer Information Systems, or equivalent

Experience: Minimum 3–5 years of solid experience in Risk Management, Technology Risk, Information Security, or IT

Monthly Salary Package : 10,000 – 25,000 SAR (Max)

Qualifications :

• Information Assurance Certifications preferred : CISSP, CISA, Security+, GSEC, CRISC, or equivalent
• Strong verbal and written communication skills (English & Arabic)
• Excellent knowledge of Microsoft Office (Word, Excel, PowerPoint), internet, and email
• Solid knowledge of automated reporting systems & project management
• Experience with Key Risk Indicators (KRIs) and Technology Risk reporting preferred
• Ability to interpret regulations and communicate effectively across all levels
• Strong presentation and teamwork skills
• Results-driven and detail-oriented

Language Requirements : English & Arabic

• Conduct IT systems reviews to identify and assess risks with remediation recommendations
• Provide assurance of effectiveness and efficiency of IT control environments across all IT domains and business areas
• Monitor and follow up on threat indicators, exploits, and vulnerabilities for timely remediation
• Support incident response and provide consolidated IT risk progress reports to management
• Prepare consolidated IT risk reports and dashboards for Technology Risk & Committees
• Document and maintain IT risk reports, SOPs, and departmental outputs
• Identify top critical IT risks and recommend frameworks to capture and govern risks
• Review and recommend improvements for IT risk measurement techniques (e.g., RCSAs)
• Act as focal point with ERM, IT Governance & Compliance, Information Security, and IT for risk reporting & remediation
• Participate in IT and digital risk tools / systems implementation with project teams and digital transformation division

Work Pattern : In person

Interview : Remote

Join to apply for the Security Risk Management Specialist role at Canonical .

In security risk management we're looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do. To support this we use industry best practices paired with emerging threat information to promote risk identification, quantification, impact analysis, and modelling to drive decision making. In this role you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will work within the team and cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. The team collaborates with our Organisational Learning and Development team to develop playbooks and security training across Canonical.

The security risk management team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They may share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.

• Define Canonical's security risk management standards and playbooks
• Analyse and improve Canonical's security risk practices
• Evaluate, select and implement new security requirements, tools and practices
• Grow the presence and thought leadership of Canonical security risk management practice
• Develop Canonical security risk learning and development materials
• Work with Security leadership to present information and influence change
• Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
• Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
• Participate in risk management, decision-making, and collaborative discussions
• Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
• Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
• Develop templates and materials to help with self-service risk management actions
• Monitor and identify opportunities to improve the effectiveness of risk management processes
• Launch campaigns to perform security assessments and help mitigate security risks across the company
• Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities

• An exceptional academic track record
• Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
• Drive and a track record of going above-and-beyond expectations
• Deep personal motivation to be at the forefront of technology security
• Leadership and management ability
• Excellent business English writing and presentation skills
• Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
• Expertise in threat modelling and risk management frameworks
• Broad knowledge of how to operationalize the management of security risk
• Experience in Secure Development Lifecycle and Security by Design methodology

• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review
• Recognition rewards
• Annual holiday leave
• Maternity and paternity leave
• Employee Assistance Programme
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world. Canonical has been a remote-first company since its inception in 2004. Working here challenges you to think differently, work smarter, learn new skills, and raise your game. Canonical is an equal opportunity employer.

We recruit on a global basis and set a very high standard for people joining the company. We expect excellence. Whatever your identity, we will give your application fair consideration.

• Entry level

• Full-time

• Finance and Sales

• Software Development

Overview

Senior Risk Management Specialist – Market & Model Risk | Islamic Development Bank (IsDB)

Location: Jeddah, Headquarter, Saudi Arabia | Job Grade: E3 | Contract Type: Fixed Term | Closing Date: 20-Oct-2025

The purpose of the job is to manage the implementation and execution of the bank’s model risk management framework. This includes participating in the implementation of model risk management policies and procedures, performing ongoing model risk monitoring, undertaking model validation, identifying and reporting on model risk, and maintaining a model inventory.

• Formulate and quantify model risk appetite.
• Develop and maintain the Model Risk Management policy, management directives, procedures, and guidelines.
• Maintain and update the model risk monitoring tools, systems, and methodologies to ensure ongoing quality of model risk management processes.
• Independently review financial and risk models in use by the Bank and periodically perform independent model validation of these models.
• Perform independent model risk assessment and model performance monitoring in accordance with the defined model risk appetite and the pre-defined model performance targets.
• Review model development and redevelopment/re-calibration proposals from model owners.
• Perform periodic procedural compliance on model development and management process within the Bank along with review of adequacy and comprehensiveness of model documentation with the approved policy, directives and guidelines and highlight deviations with recommendations to achieve compliance.
• Undertake ongoing management of model tiering, perform model risk assessments, and maintain model inventory, model documentation, model performance reports and model validation reports.

• Provide technical guidance and review the work delivered by less experienced team members.
• Monitor the effective implementation and adherence to respective risk management policies, procedures, and controls so that all relevant procedural/legislative requirements are fulfilled.
• Keep abreast of the latest developments, regulations and leading practices in the field and propose any necessary actions.
• Propose and implement process improvements to increase efficiency, effectiveness, and compliance of the related operations.

• Bachelor’s Degree in a Quantitative Science (Finance, Economics, Mathematics, Statistics, Actuarial Science, Financial Engineering or similar).
• Professional certifications like CFA/PRM/FRM/CQF would be preferred.
• Advanced programming skills using statistical/mathematical software.
• Proficiency in SAS, MATLAB, R, Python, VB or other statistical modeling. Software and database management languages such as SQL Database.
• Minimum 8 years of relevant experience in a financial modelling or risk management function, of which at least 3 years in Model Risk, preferably in a Multilateral Development Bank.
• Languages: English: Mandatory; Arabic: Preferred; French: Preferred.

• Risk Assessment and Risk Quantification skills
• Quantitative Analytical skills
• Asset Valuation Techniques
• Familiarity with External Rating Methodologies
• Governance, Risk and control
• Islamic Finance
• Stress Testing
• Analytical Thinking
• Problem Solving
• Attention to detail
• Stakeholder Management
• MS Office

If you meet the criteria and you are enthusiastic about the role, we would welcome your application. To complete the application you would need the following document(s):

• Resume/CV
• Copy of passport
• Academic certificate

If you are currently an IsDB Regular staff applying for this role and get selected through the competitive selection process, your current contract type and other terms and conditions will remain unchanged.

The Islamic Development Bank (IsDB) does not ask for payments of any kind from applicants throughout the recruitment process and does not request information on applicants’ bank accounts. IsDB declines all responsibility for fraudulent publications of job posts or job offers in its name or for the fraudulent use of its name in any way.

Overview

Be a part of a well-established financial services organisation in Jeddah. Handle all matters related to information security architecture and engineering.

The Senior Manager - Information Security will be / have :

• A Bachelor's or Master's degree in Information Technology, Computer Science or other relevant fields of study
• 6+ years of experience in Information Security, ideally within the Banking / Financial Services sector
• Expertise in information security architecture and engineering
• Strong understanding of Information Security frameworks such as ISO2700
• Relevant certifications such as CISSP, CISM, CCISO, etc. would be preferred
• Excellent knowledge of Saudi regulatory requirements (SAMA, NCA, etc.)
• Track record in designing secure systems and leading cyber security initiatives
• Strong project management skills

• Support the CISO in developing and executing the information security strategy and roadmap
• Contribute to long term planning and act as a key advisor on technical risks
• Serve as acting CISO as and when required
• Evaluate and recommend security technologies, tools and methodology ensure the organisation complies with SAMA cybersecurity framework and NCA
• Lead technical input for audits and regularities reviews
• Oversee security monitoring, threat and vulnerability management activities
• Lead incident response efforts
• Collaborate with IT, compliance, audit and other business unit
• Report Information Security KPIs and metrics to executive management
• Represent the Information Security function internally and externally as require

The salary for the Senior Manager - Information Security role will be based on experience.

Aniket Deo

Quote job ref

JN-

nationalities

Job Title: Security Analyst (English Speaking)

We are currently seeking a skilled Security Analyst to join our team in Jeddah, Saudi Arabia. As a security analyst, you will be responsible for monitoring and analyzing security systems, identifying potential threats and vulnerabilities, and implementing security measures to protect our organization from cyber attacks. This is a contract position with accommodation provided and includes free visa and ticket for all nationalities.

Key Responsibilities:
- Monitor security systems such as firewalls, intrusion detection systems, and anti-virus software.
- Analyze security logs and reports to identify potential threats or breaches.
- Conduct regular vulnerability assessments and penetration testing to identify any weaknesses in our systems.
- Develop and implement security measures to protect against cyber attacks.
- Keep up-to-date with the latest security trends and technologies.
- Respond quickly to any security incidents or breaches.

Requirements:
- Fluent in English (verbal and written).
- Proven experience as a Security Analyst or similar role.
- Knowledge of information security principles, best practices, and industry standards.
- Strong analytical skills with the ability to identify patterns and trends in data.
- Excellent problem-solving skills with the ability to think critically under pressure.
- Experience conducting vulnerability assessments and penetration testing is preferred.
- Knowledge of network protocols and operating systems is an asset.

If you are a dedicated Security Analyst with a passion for protecting organizations from cyber threats, we encourage you to apply for this exciting opportunity. Please note that this position is open to all nationalities.

This job has no reviews yet. You can be the first!

The most in-demand professions in Jeddah:

Users also frequently search in these cities:

More professions from the category Security - Security - Power structures:

Subscribe to our telegram channel @layboard_in

Overview

Security Analyst (Indian Nationals) – Jeddah, Saudi Arabia. This is a contract position with visa and ticket provided. The ideal candidate has experience in security analysis, risk assessment, and threat management. Fluency in English is preferred but not required.

• Identify potential security risks and threats to the organization.
• Develop and implement security protocols and measures to mitigate threats.
• Conduct regular security audits and provide recommendations for improvements.
• Analyze security data, monitor incidents, and report findings.
• Work independently with strong analytical skills and attention to detail.

• Relevant experience in security analysis, risk assessment, and threat management.
• Strong analytical abilities and attention to detail.
• Ability to work independently.
• English language proficiency (preferred but not required).