# Senior Manager - Third Party Security at Qiddiya Investment Company

> Open job at Qiddiya Investment Company in Riyadh, Saudi Arabia. Workplace: On-site.

Source: Gulf Dev Jobs, https://gulfdevjobs.com/jobs/qiddiya-investment-company-senior-manager-third-party-security-7jojxpi
Posted 22 September 2026. Last checked on the employer's career site: 11 November 2026.

## Facts

- Company: [Qiddiya Investment Company](https://gulfdevjobs.com/companies/qiddiya-investment-company)
- Location: Riyadh, Saudi Arabia
- Workplace: On-site
- Employment type: Full-time
- Arabic: Not required
- Not mentioned in the job post: salary, housing, flights, visa sponsorship, relocation, where you can apply from

## Job description

Lead and manage Qiddiya's Third-Party Security Risk Management program to ensure vendors, partners, consultants, and service providers comply with cybersecurity requirements and do not introduce unacceptable risks to Qiddiya's information assets, systems, and operations. The role is responsible for establishing security assessment frameworks, overseeing vendor security reviews, and driving remediation of identified risks. This aligns with industry practices for cybersecurity risk management and third-party oversight.

#### Key Responsibilities

- Develop and maintain the Third-Party Security Risk Management (TPSRM) framework.
- Conduct cybersecurity due diligence and risk assessments for vendors and suppliers.
- Review security requirements during procurement, RFP, and contract stages.
- Assess cloud providers, SaaS platforms, managed service providers, and strategic partners.
- Define vendor security controls aligned with NCA ECC, ISO 27001, NIST, and Qiddiya cybersecurity standards.
- Establish vendor risk classification and assessment methodologies.
- Monitor remediation plans and track closure of identified security gaps.
- Collaborate with Procurement, Legal, Compliance, Enterprise Risk, and Technology teams.
- Lead periodic reassessments of critical vendors.
- Report third-party cyber risks, trends, and KPIs to senior management.
- Manage external security audits, questionnaires, and assurance activities.
- Lead and develop the Third-Party Security team.

**Requirements**

- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
- 8–12 years of cybersecurity experience.
- Minimum 4 years in Third-Party Security, Vendor Risk Management, Cybersecurity Risk Management, or GRC.
- Experience within large enterprises, giga projects, banking, telecom, government, or critical infrastructure environments.
- Experience managing teams and stakeholder engagement at senior levels.

## How to apply

Apply on the job page, https://gulfdevjobs.com/jobs/qiddiya-investment-company-senior-manager-third-party-security-7jojxpi: its Apply button opens the employer's own application page.

## More jobs from Qiddiya Investment Company

- [Analyst - Cybersecurity Business Partner](https://gulfdevjobs.com/jobs/qiddiya-investment-company-analyst-cybersecurity-business-partner-a8sqllr): Qiddiya Investment Company, Riyadh, Saudi Arabia. On-site. Posted 9 November 2026.
- [Senior Director - Commercial (Citywide Infrastructure)](https://gulfdevjobs.com/jobs/qiddiya-investment-company-senior-director-commercial-citywide-infrastructure-a5twd9d): Qiddiya Investment Company, Riyadh, Saudi Arabia. On-site. Posted 5 November 2026.
- [Assistant Manager - IT Security Design](https://gulfdevjobs.com/jobs/qiddiya-investment-company-assistant-manager-it-security-design-5rr206d): Qiddiya Investment Company, Riyadh, Saudi Arabia. On-site. Posted 1 November 2026.
- [Senior Specialist - SAP Finance - Operations](https://gulfdevjobs.com/jobs/qiddiya-investment-company-senior-specialist-sap-finance-operations-rhblptr): Qiddiya Investment Company, Riyadh, Saudi Arabia. On-site. Posted 27 October 2026.
- [Senior Specialist - Cloud Operation](https://gulfdevjobs.com/jobs/qiddiya-investment-company-senior-specialist-cloud-operation-8v3l945): Qiddiya Investment Company, Riyadh, Saudi Arabia. On-site. Posted 25 October 2026.