Access Control & Cryptography Manager

Title: Access Control & Cryptography Manager

Department: Cybersecurity

Location: Riyadh

Core Responsibilities:

• Lead the coordination with various bank departments to gather required information related to access management and user provisioning.
• Define and implement effective control mechanisms to govern access rights, monitor authority delegations, and ensure periodic reviews of user profiles across all systems.
• Develop, review, and oversee the implementation of access management and cryptographic policies, standards and controls (e.g., encryption, hashing, digital signatures), ensuring alignment with regulatory requirements and industry best practices.
• Ensure policies enforce secure key management and cryptographic practices across all relevant systems and platforms.
• Manage the definition, maintenance, and review of user access and access matrices across all systems and applications.
• Review and enhance onboarding processes for new employees, including the setup of user accounts, passwords, and access controls.
• Collaborate with business units during systems implementations or upgrades to define cryptographic keys and access requirements.
• Assess user access controls during UAT and on periodic bases to ensure compliance with the policy.
• Supervising the security activities related to SARIE/RTGS system, including managing access, issuing RTGS cards, annual certification renewal, to assure compliance with SAMA and Saudi Payment guidelines.
• Manage the full lifecycle management of cryptographic keys (generation, storage, rotation, archival, revocation, and destruction) to ensure confidentiality and data integrity.
• Manage the administration of PKI and digital certificates, including issuance, renewal, revocation, and compliance with bank policies and regulatory mandates.

Qualifications and Requirements:

• Bachelor’s degree in Computer Science, Information Security or any equivalent major.
• Around 5 years of relevant experience with at least 3 years in a similar role.
• Experience in an enterprise scale organization; preferably in the finance or similarly regulated sector