Access Control & Cryptography Manager

Title: Access Control & Cryptography Manager

Department: Cybersecurity

Location: RiyadhCore Responsibilities:Lead the coordination with various bank departments to gather required information related to access management and user provisioning.Define and implement effective control mechanisms to govern access rights, monitor authority delegations, and ensure periodic reviews of user profiles across all systems.Develop, review, and oversee the implementation of access management and cryptographic policies, standards and controls (e.g., encryption, hashing, digital signatures), ensuring alignment with regulatory requirements and industry best practices.Ensure policies enforce secure key management and cryptographic practices across all relevant systems and platforms.Manage the definition, maintenance, and review of user access and access matrices across all systems and applications.Review and enhance onboarding processes for new employees, including the setup of user accounts, passwords, and access controls.Collaborate with business units during systems implementations or upgrades to define cryptographic keys and access requirements.Assess user access controls during UAT and on periodic bases to ensure compliance with the policy.Supervising the security activities related to SARIE/RTGS system, including managing access, issuing RTGS cards, annual certification renewal, to assure compliance with SAMA and Saudi Payment guidelines.Manage the full lifecycle management of cryptographic keys (generation, storage, rotation, archival, revocation, and destruction) to ensure confidentiality and data integrity.Manage the administration of PKI and digital certificates, including issuance, renewal, revocation, and compliance with bank policies and regulatory mandates.Qualifications and Requirements:Bachelor’s degree in Computer Science, Information Security or any equivalent major.Around 5 years of relevant experience with at least 3 years in a similar role.Experience in an enterprise scale organization; preferably in the finance or similarly regulated sector