Cybersecurity Manager

About Moneymoon

Role Overview

Governance and Risk

• Own cybersecurity policies, standards, controls, improvement plans, evidence, and regulatory documentation.
• Drive alignment with SAMA CSF, MVC, CRFR, CFFR, NCA ECC, PDPL, and ISO/IEC 27001.
• Lead audits, assessments, control testing, findings management, risk treatment, metrics, and reporting.

Security Operations and Engineering

• Improve security across cloud, IAM/PAM, endpoints, EDR, email, networks, applications, APIs, vulnerability management, logging, SIEM, and threat detection.
• Manage joiner, mover, and leaver access processes, privileged accounts, access reviews, and remediation.
• Automate repetitive security processes through scripting, integrations, and security tooling.

AI and Product Security

• Build AI-driven detection, alert triage, evidence collection, workflow automation, and incident-response capabilities.
• Protect the company’s AI and LLM use against prompt injection, sensitive data leakage, unauthorized access, insecure integrations, and model misuse.
• Conduct threat modeling and security reviews across products, applications, APIs, cloud, integrations, and significant technology changes.

Incident Response and Resilience

• Own vulnerability scanning, prioritization, remediation tracking, penetration testing, and closure verification.
• Lead incident detection, containment, investigation, eradication, recovery, root-cause analysis, and corrective actions.
• Support business continuity, disaster recovery, cyber resilience, recovery objectives, tabletop exercises, and incident simulations.

Third-Party and Awareness

• Assess vendor, cloud provider, integration, and other critical third-party cybersecurity controls, dependencies, and risks.
• Drive cybersecurity awareness, training, onboarding activities, and practical security accountability across the organization.

Required Qualifications

• At least 3 years of progressive cybersecurity experience is required.
• Practical SAMA CSF knowledge and experience implementing or assessing cybersecurity controls are required.
• Hands-on experience with cloud security, governance, risk management, security operations, incident response, and technical security improvements is required.
• Strong written and verbal English communication skills are required.

Preferred Qualifications

• Experience in fintech, lending, banking, payments, or another regulated environment is preferred.
• SAMA assessment, operational resilience, fraud control, security automation, AI security, scripting, or relevant professional certification experience is preferred.

Benefits

• The package includes performance-based bonus opportunities, medical insurance, annual salary review, and potential ESOP eligibility.
• The role includes professional development support and the opportunity to build the cybersecurity function as a founding team member.