Information Security Threat Manager

Job Purpose

Lead the identification, assessment, monitoring, and management of cybersecurity threats to protect the Bank’s information assets, systems, and digital services. The role is responsible for strengthening threat detection capabilities, managing threat intelligence, and ensuring timely response to emerging cyber threats in coordination with relevant technology and security teams.

Key Responsibilities

• Lead the Bank’s cyber threat management and threat intelligence activities.
• Continuously monitor internal and external sources for emerging cyber threats, vulnerabilities, indicators of compromise, and threat actor activity.
• Analyze cyber threats and assess their potential impact on the Bank’s systems, applications, infrastructure, and customers.
• Develop and maintain threat profiles, attack scenarios, and threat intelligence reports.
• Coordinate with SOC, Incident Response, Vulnerability Management, Digital Fraud, Infrastructure, and Application Security teams to address identified threats.
• Support proactive threat hunting activities to identify suspicious or malicious activity within the Bank’s environment.
• Translate threat intelligence into actionable detection rules, monitoring use cases, and security controls.
• Monitor critical vulnerabilities and emerging exploits and support prioritization of remediation based on threat exposure.
• Conduct analysis of cybersecurity incidents to identify threat patterns, tactics, techniques, and procedures.
• Maintain relevant cyber threat indicators and ensure integration with applicable security monitoring platforms.
• Provide regular threat intelligence and risk updates to Information Security management.
• Support regulatory, audit, and cybersecurity assessments related to threat management.
• Ensure alignment with SAMA Cyber Security Framework, NCA requirements, Bank policies, and applicable cybersecurity standards.
• Coordinate with external cybersecurity intelligence providers and relevant industry or regulatory stakeholders when required.
• Develop and maintain procedures, standards, dashboards, and KPIs related to cyber threat management.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, GIAC, CEH, or equivalent are preferred.
• Typically 7+ years of relevant cybersecurity experience, including experience in threat intelligence, SOC, incident response, threat hunting, or security operations.
• Prior experience within banking or financial services is highly preferred.

Required Knowledge & Skills

• Cyber Threat Intelligence and Threat Hunting
• Security Operations and Incident Response
• SIEM and security monitoring solutions
• Threat intelligence platforms and feeds
• Malware, phishing, ransomware, and advanced persistent threat analysis
• Vulnerability and exposure management
• Network and endpoint security
• Cybersecurity risk assessment
• Banking cybersecurity and regulatory requirements
• Strong analytical, reporting, and stakeholder management skills