Summary
Qiddiya Investment Company is hiring a Senior Manager, Asset Security Operations in Riyadh. The role leads daily IT, network, infrastructure, OT, and application security operations, manages the ASO team and oversees Managed Service Partner delivery and SLA performance. Responsibilities include platform governance, application security, vulnerability management, change management, operational handovers, incident coordination, and monthly reporting. Applicants should have at least 7 years of cybersecurity experience, including 3 years in leadership, and experience with enterprise security platforms; CISSP or CISM is preferred.
The posting
As published on qiddiya.com. Pulled from the employer's site and shown as they wrote it.
Lead the day-to-day delivery of IT, network/infrastructure, OT, and application security operations across all ASO-managed platforms. Oversee Managed Service Partner (L1/L2) service delivery, ensuring effective platform governance, SLA compliance, operational efficiency, and continuous improvement.
Key Responsibilities
- Lead and manage the ASO team, including Senior Lead, Senior Specialist, and Security Specialist.
- Oversee Managed Service Partner L1/L2 service delivery and SLA performance.
- Govern platform administration and security tool configuration changes.
- Oversee the Application Security program, including WAF governance, application vulnerability remediation, and coordination with the Cybersecurity Team.
- Lead vulnerability management activities, including prioritization, tracking, and reporting.
- Manage change management for all ASO-owned security platforms.
- Oversee operational handover of new security tools and ensure service continuity.
- Coordinate with the Security Lead on security incidents, escalations, and change approvals.
- Prepare and present monthly operational and performance reports for leadership.
Requirements
- 7+ years of cybersecurity experience, including 3+ years in a leadership role.
- Experience managing enterprise security operations and security platforms.
- Hands-on experience with security technologies such as firewalls, EDR, PAM, vulnerability management, and WAF.
- Experience managing Managed Security Service Providers (MSSPs) and SLA performance.
- Strong stakeholder management and operational governance skills.
- Professional certification such as CISSP or CISM preferred.