About Qiddiya and the Role

Qiddiya is seeking a Senior Manager Asset Security Operations to join its team in Riyadh. This full-time role involves leading the day-to-day delivery of critical security operations across various technology domains.

Role Overview

The Senior Manager Asset Security Operations will be responsible for leading the daily execution of security operations for IT, network/infrastructure, OT, and application security platforms managed by the Asset Security Operations (ASO) team. A core aspect of this role includes overseeing the service delivery of Managed Service Partners (L1/L2) to ensure effective platform governance, adherence to Service Level Agreements (SLAs), operational efficiency, and ongoing improvement initiatives.

Key Responsibilities

• Lead and manage the ASO team, including Senior Lead, Senior Specialist, and Security Specialist roles.
• Oversee Managed Service Partner L1/L2 service delivery and monitor SLA performance.
• Govern platform administration and security tool configuration changes.
• Manage the Application Security program, encompassing WAF governance, application vulnerability remediation, and coordination with the Cybersecurity Team.
• Lead vulnerability management activities, including prioritization, tracking, and reporting.
• Manage change management processes for all ASO-owned security platforms.
• Oversee the operational handover of new security tools and ensure service continuity.
• Coordinate with the Security Lead on security incidents, escalations, and change approvals.
• Prepare and present monthly operational and performance reports for leadership.

Required Qualifications and Experience

• A minimum of 7 years of experience in cybersecurity, with at least 3 years in a leadership role.
• Demonstrated experience managing enterprise security operations and security platforms.
• Proven experience managing Managed Security Service Providers (MSSPs) and ensuring SLA performance.

Essential Skills and Certifications

• Hands-on experience with various security technologies, including firewalls, EDR, PAM, vulnerability management, and WAF.
• Strong stakeholder management and operational governance skills.
• Professional certification such as CISSP or CISM is preferred.

Application Process

Candidates who meet the above requirements are encouraged to apply.