Department: Information Technology

Employment Type: Full-Time

Location: Riyadh, Saudi Arabia

Reports To: Executive Management

Job Purpose

The IT Manager is responsible for managing and overseeing the company’s entire Information Technology function, including internal systems, website, IT infrastructure, information security, data protection, and day-to-day technical support. The role ensures the reliability, security, and efficiency of all technology systems supporting the business and safeguards the confidentiality and integrity of client information, including sensitive intellectual property data entrusted to the company.

Key Responsibilities

•     Manage and oversee the company’s overall IT operations, systems, and technology infrastructure.

•     Maintain and manage internal IT systems, applications, hardware, software, networks, and related services.

•     Manage and maintain the company’s website, including technical issues, updates, availability, and security.

•     Ensure the reliability, performance, and continuity of IT infrastructure and systems.

•     Diagnose and resolve technical issues and provide timely IT support to employees.

•     Monitor and maintain network, servers, devices, and other IT infrastructure.

•     Implement and maintain information security measures to protect company systems and data.

•     Ensure the protection and confidentiality of client and company data, including privileged and confidential intellectual property information.

•     Monitor cybersecurity risks, vulnerabilities, and potential security threats.

•     Coordinate with external IT vendors, service providers, and technology partners when required, including managing contracts, service-level agreements, and renewals.

•     Prepare and manage the IT budget, procurement, and technology project plans.

•     Ensure IT systems and practices comply with applicable company policies, security standards, and regulatory requirements.

•     Evaluate and recommend new technologies, systems, and solutions to improve business efficiency.

•     Maintain IT documentation, system records, licenses, and technology assets.

•     Provide management with regular updates regarding IT performance, risks, security, and ongoing projects.

•     Oversee the secure and compliant use of AI tools and automation platforms, including controls that prevent exposure of confidential client information.

Cybersecurity & Information Security

•     Develop and enforce appropriate cybersecurity and information-security policies and controls, aligned with the NCA Essential Cybersecurity Controls (ECC) and recognized standards such as ISO/IEC 27001.

•     Protect company systems, networks, devices, and data against unauthorized access, cyber threats, malware, phishing, and data loss.

•     Manage user access, permissions, authentication, endpoint security, firewalls, and security monitoring, including multi-factor authentication, encryption, and data-loss-prevention controls.

•     Conduct periodic security assessments, including vulnerability scans and penetration tests, and coordinate remediation of identified vulnerabilities.

•     Develop and maintain incident-response, backup, disaster-recovery, and business-continuity procedures, and test them at least annually.

•     Promote cybersecurity awareness among employees through regular training and phishing simulations.

•     Lead the response to security incidents and data breaches, including escalation to management and notification of affected clients and authorities where required.

Applications & Business Systems

•     Manage the company’s business applications and enterprise systems, including the IP management, docketing, matter-management, and accounting/billing systems.

•     Oversee Microsoft 365 and/or other corporate productivity and collaboration platforms.

•     Manage email, document management, file sharing, access control, and collaboration solutions.

•     Identify opportunities for automation and digital transformation to improve productivity and operational efficiency.

IT Support & Service Management

•     Ensure timely and effective technical support to employees.

•     Establish procedures for handling IT incidents, service requests, and recurring technical issues.

•     Monitor IT service quality and user satisfaction.

•     Provide technical guidance and training to employees when required.

•     Manage onboarding and offboarding IT requirements, including devices, accounts, system access, and permissions.

•     Provide out-of-hours support for critical incidents as required.

Governance, Compliance & Documentation

•     Establish appropriate IT governance, policies, procedures, and internal controls.

•     Ensure IT practices comply with applicable company policies, client contractual and confidentiality requirements, and relevant Saudi regulations and cybersecurity/data-protection requirements (including the NCA cybersecurity controls and the Personal Data Protection Law).

•     Maintain appropriate documentation for systems, network architecture, configurations, licenses, access rights, IT assets, and operating procedures.

•     Support internal and external audits relating to IT systems, cybersecurity, access controls, and information management.

•     Maintain an IT risk register and report material IT and cybersecurity risks to management.

AI Knowledge:

Demonstrated knowledge of Artificial Intelligence technologies, tools, and applications, with the ability to identify and implement AI solutions that improve business processes, productivity, and IT operations.

Qualifications

•     Bachelor's degree in Information Technology, Computer Science, Information Systems, Computer Engineering, or a related discipline.

•     Professional certifications such as CISSP, CISM, CISA, ITIL, PMP, or Microsoft 365/Azure certifications are preferred.

•     Fluency in English is required; proficiency in Arabic is preferred.

Experience

•     Minimum 7 years of relevant IT experience, including at least 3 years in an IT management or supervisory position.

•     Demonstrated experience managing IT infrastructure, networks, cloud environments, cybersecurity, business applications, and technical support.

•     Experience managing IT vendors, contracts, budgets, and technology projects.

•     Experience in a law firm, is preferred.

Technical Skills

The successful candidate should have strong knowledge and practical experience in:

•     Microsoft 365 administration and enterprise productivity solutions.

•     Windows environments, Active Directory / Entra ID, and user-access management.

•     Network infrastructure, LAN/WAN, VPN, Wi-Fi, firewalls, and network security.

•     Cloud platforms such as Microsoft Azure and/or AWS.

•     Endpoint management and security.

•     Cybersecurity controls and security monitoring.

•     Backup, disaster recovery, and business continuity.

•     ERP, CRM, HR, finance, and other business applications.

•     IT asset and software-license management.

•     IT service management and helpdesk operations.

•     Data protection, access control, and information-security best practices.

•     NCA Essential Cybersecurity Controls (ECC), the Personal Data Protection Law (PDPL), and ISO/IEC 27001 requirements.

•     AI tools, workflow automation, and the secure integration of third-party platforms and APIs.

Personal Competencies

•     Integrity and discretion in handling confidential and privileged information.

•     Strong leadership, communication, and stakeholder-management skills, with the ability to explain technical matters to non-technical users.

•     Sound judgment, analytical and problem-solving ability, and the capacity to prioritize under pressure.