The Cybersecurity Lead reports to the CISO and leads the execution of the organization’s cybersecurity, information security, governance, risk, and compliance agenda in Saudi Arabia.

The role is responsible for strengthening the organization’s security posture, ensuring regulatory and enterprise compliance, managing cyber risks and audits, and working closely with business, technology, and leadership stakeholders.

Roles & Responsibilities:

• Act as the lead and SPOC for Information Security, Cybersecurity, and GRC initiatives in Saudi Arabia under the direction of the CISO.
• Lead the implementation and continuous improvement of the Cybersecurity, Information Security, and GRC function.
• Ensure alignment with Saudi regulatory requirements, enterprise security standards, and client security requirements.
• Manage cybersecurity risk assessments, risk acceptance, mitigation, vulnerability management, and security assurance activities.
• Identify, assess, quantify, report, communicate, and monitor security gaps and associated remediation plans.
• Lead internal, statutory, client, and certification audits from an Information Security and IT perspective.
• Manage security certifications and compliance programs, including ISO 27001 and NCA ECC requirements.
• Review and strengthen security policies, procedures, controls, and the Security Assurance Framework.
• Develop cybersecurity and GRC dashboards, KPIs, metrics, and management reports for the CISO and leadership.
• Support the CISO with cybersecurity, GRC, and IT risk management updates and presentations.
• Demonstrate security compliance and control effectiveness to internal stakeholders, clients, and auditors.
• Participate in client discussions, RFIs, RFPs, and proposals related to cybersecurity and information security.
• Coordinate with enterprise and local teams to ensure consistency in security policies and procedures.
• Support budget planning and manage cybersecurity-related PR/PO processes.

Experience & Qualifications

• Minimum 9 years of progressive experience in Information Security, Cybersecurity, GRC, or Risk Management.
• Minimum 5 years of leadership experience.
• Proven experience establishing or leading Information Security/Cybersecurity functions.
• Strong knowledge of Saudi Arabian cybersecurity regulations and compliance requirements.
• Experience with NCA ECC, ISO 27001, security audits, certifications, risk management, and regulatory compliance.
• Hands-on experience in risk assessment, vulnerability management, security assurance, risk acceptance, and mitigation planning.
• Experience working with CISO/CIO and other senior leadership stakeholders.
• Strong client-facing experience, including security presentations, RFIs, RFPs, and audits.
• Experience developing cybersecurity dashboards, metrics, and executive-level reporting.
• Knowledge of security budget management and PR/PO processes.
• Excellent stakeholder management, presentation, and communication skills.

Education

• Required: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Preferred: Master’s degree in information security, Business Administration, Technology Management, or a related field.