Ahmed Alobaid

Cybersecurity Governance Manager @ STC Bank

About

As the Head of Cybersecurity Governance at STC Bank, one of the leading digital banks in Saudi Arabia, I oversee the implementation and maintenance of the cybersecurity policies, standards, and procedures across STC Bank. I also manage the cybersecurity awareness and training program, ensuring that all bank employees and customers are trained and informed on the best practices, emerging trends in cybersecurity and ensuring compliance with regulatory and industry standards and best practices.I hold a Master's degree in Cybersecurity from Saudi Electronic University, where I developed my skills and knowledge in various domains, such as incident response, risk assessment and cryptography. I also hold a Bachelor's degree in Computer Science from King Saud University, where I learned the fundamentals of programming, networking, and databases. I also hold multiple cybersecurity certifications.With over 8 years of experience in the financial sector, I have successfully handled various security projects, and audits, working with different teams and partners to ensure the confidentiality, integrity, and availability of the data and systems. I am passionate about cybersecurity and motivated to continuously learn and improve my skills and competencies. My goal is to contribute to the security and resilience of the organization and the industry.

Country

Saudi Arabia

City

Riyadh

Industry

Banking

Skill

Performance Monitoring, Security Policy, Security Compliance, Regulatory Compliance, Cyber Security Compliance, Cybersecurity Governance, Cybersecurity GRC, Regulatory Requirements, Responsible, Accountable, Consulted, Informed (RACI), Metric Development, Teamwork, Management, Leadership, Communication, International Standards, Compliance Assessments, Presentations, Problem Solving, Strategy, Key Performance Indicators

Experience

Cybersecurity Governance Manager

STC Bank

2025-4 - Present · 1 yr 6 mos

Riyadh, Saudi Arabia

- Manage and oversee the development of enterprise cybersecurity policies, frameworks, procedures, standards and Guidelines in line with the Cybersecurity Governance capability. - Define and monitor KPIs/KRIs to measure enterprise-wide cybersecurity risk exposure and support program governance. - Managing and oversee the cybersecurity strategy development and execution with the respective stakeholders and ensuring the proper tracking in the relevant committees. - Oversee cybersecurity awareness campaigns and training targeting both STC Bank employees and Marchent through diﬀerent channels. - Manage the internal audit activities and observations. - Manage the cybersecurity steering committee meetings chaired by CISO.

Cybersecurity Governance Senior Manager

alrajhi bank

2024-6 - 2025-4 · 11 mos

Riyadh, Saudi Arabia

- Manage the Development of enterprise cybersecurity policies, frameworks, procedures, standards, Guidelines and minimum standards in line with the Cybersecurity Governance capability. - Managing the cybersecurity strategy development and execution with the respective stakeholders and ensuring the proper tracking in the relevant committees. - Manage the Cybersecurity and IT Risk committee meetings chaired by CISO.

Cybersecurity Governance and Compliance Manager

SAB

2022-7 - 2024-6 · 2 yrs

Riyadh, Saudi Arabia

- Policies, Procedures, Standards, and Processes periodic review inline with regulatory requirements. - Develop, manage, and monitor the Department KPIs and KRIs. - Managing Cybersecurity risk register. - Manage and track the Local Regulatory Compliance & Requirements. - Manage and oversee internal and external audit exercises. - Managing the cybersecurity strategy execution with the respective stakeholders. - Information security awareness development for employees and customers.

Cybersecurity Governance and Compliance Assistant Manager

SAB

2019-7 - 2022-6 · 3 yrs

Riyadh, Saudi Arabia

Information Security Officer

Alawwal Bank

2018-5 - 2019-6 · 1 yr 2 mos

Al-Riyadh Governorate, Saudi Arabia

-work with business and other ISD units to ensure risks are mitigated. -Review and validate periodically (Monthly and Quarterly) Periodical security Review Checklist. -Providing technical assistance during system security investigations and tracking Penetrations. -Conducting Vulnerability Assessments and Define the Scope for Penetration Testing and Vulnerability Assessment activities. -Reporting the observations. -Conducting Phishing Assessment. -Incident Management.