Information Security Threat Manager

Job Overview

Lead the identification, evaluation, surveillance, and management of cybersecurity threats to safeguard the Bank's information assets, systems, and digital services. The role demands enhancement of threat detection capabilities, handling threat intelligence, and ensuring prompt reaction to evolving cyber threats while collaborating closely with technical and security departments.

Primary Duties

• Oversee the Bank’s cyber threat management and intelligence operations.
• Regularly monitor both internal and external sources for new cyber threats, vulnerabilities, compromise indicators, and threat actors' activities.
• Analyze cyber threats and evaluate their potential effects on the Bank’s infrastructure, systems, applications, and clients.
• Create and update threat profiles, simulate attack scenarios, and produce threat intelligence reports.
• Collaborate with SOC, Incident Response, Vulnerability Management, Digital Fraud, Infrastructure, and Application Security teams to mitigate identified threats.
• Support proactive threat hunting to detect suspicious or malicious activities in the Bank’s environment.
• Convert threat intelligence into actionable detection rules, monitoring use cases, and security measures.
• Keep track of critical vulnerabilities and emerging exploits, prioritizing remediation efforts based on exposure risk.
• Perform detailed analyses of cybersecurity incidents to recognize threat patterns, tactics, and procedures.
• Maintain relevant cyber threat indicators and ensure they are integrated with security monitoring platforms.
• Deliver periodic threat intelligence and risk updates to Information Security leadership.
• Assist in regulatory, audit, and cybersecurity assessments pertinent to threat management.
• Ensure compliance with SAMA Cyber Security Framework, NCA standards, Bank policies, and other applicable cybersecurity regulations.
• Engage with external cybersecurity intelligence sources and coordinate with industry or regulatory partners as needed.
• Develop and uphold procedures, standards, dashboards, and KPIs related to cyber threat management.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related discipline.
• Preferred professional certifications include CISSP, CISM, GIAC, CEH, or equivalent credentials.
• Minimum 7 years of relevant experience in cybersecurity, encompassing threat intelligence, SOC, incident response, threat hunting, or security operations.
• Prior work experience in the banking or financial services sector is strongly preferred.

Knowledge & Skills

• Expertise in Cyber Threat Intelligence and Threat Hunting methodologies.
• Experience with Security Operations and Incident Response activities.
• Proficiency in using SIEM and other security monitoring tools.
• Familiarity with threat intelligence platforms and feeds.
• Understanding of malware, phishing, ransomware, and advanced persistent threat analysis.
• Knowledge of vulnerability and exposure management strategies.
• Background in network and endpoint security.
• Capability in cybersecurity risk assessment processes.
• Insight into banking cybersecurity requirements and regulatory compliance.
• Strong analytical, reporting, and stakeholder coordination skills.