Access Control & Cryptography Manager

About this opportunity

Title: Access Control & Cryptography Manager Department: Cybersecurity Location: Riyadh Core Responsibilities: Govern and enhance Identity & Access Management (IAM) processes, including user provisioning, deprovisioning, access reviews, and recertification. Develop and maintain access control policies, standards, user profiles, and authorization matrices across banking systems and applications. Oversee user access controls during UAT and on periodic bases and ensure compliance with the policy. Manage Privileged Access Management (PAM), Segregation of Duties (SoD), and access control assessments. Develop and maintain cryptographic policies, standards, and controls to ensure secure cryptographic practices and regulatory compliance. Govern the cryptographic key lifecycle, Hardware Security Modules (HSMs), Public Key Infrastructure (PKI), and digital certificate management. Collaborate with business and technology teams to define and assess access control and cryptographic requirements. Manage security-related activities for SARIE/RTGS, including access management, security card issuance, and annual certification renewals. Ensure compliance with Saudi Central Bank, NCA, PCI DSS, and relevant industry standards, while supporting audits, risk assessments, and continuous improvement. Qualifications and Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. 5+ years of relevant experience in cybersecurity, IAM, and/or cryptographic security, preferably within banking. Strong knowledge of IAM, PAM, access governance, cryptographic key management, HSMs, and PKI. Good understanding of Saudi Central Bank, NCA, PCI DSS, and relevant security standards. Strong analytical, communication, and stakeholder management skills. Professional certifications such as CISSP or CISM are an advantage.