Cybersecurity Director

Cybersecurity Director

The Cybersecurity Director will be responsible for leading the organization’s cybersecurity function, developing and implementing cybersecurity strategies, policies, controls, and risk management frameworks to protect critical information assets, systems, networks, and digital services.

Key Responsibilities:

• Lead the development and implementation of the organization’s Cybersecurity Strategy, roadmap, and operating model.

• Establish, maintain, and oversee cybersecurity policies, standards, procedures, and controls across the organization.

• Lead cybersecurity risk management activities, including risk identification, assessment, treatment, and ongoing monitoring.

• Oversee the protection of information systems, networks, applications, data, and technology assets against cybersecurity threats.

• Lead cybersecurity incident response readiness and oversee response, recovery, and post-incident improvement activities.

• Oversee vulnerability management, security assessments, penetration testing, and remediation programs.

• Ensure compliance with applicable Saudi cybersecurity regulations, frameworks, controls, and requirements.

• Oversee cybersecurity risk assessments related to third-party vendors, technology providers, and external partners.

• Define cybersecurity KPIs and KRIs and provide regular cybersecurity risk and performance reporting to senior management and relevant committees.

• Develop and oversee cybersecurity awareness programs to strengthen the organization’s security culture.

• Collaborate with Technology, Risk Management, Business Continuity, Internal Audit, and other relevant functions to ensure an integrated approach to cybersecurity.

• Build, lead, and develop the cybersecurity team and strengthen its technical and leadership capabilities.

Qualifications & Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline. A Master’s degree is preferred.

• Strong professional experience in Cybersecurity or Information Security, including leadership or managerial experience.

• Strong experience across cybersecurity governance, risk management, compliance, and incident management.

• Advanced knowledge of relevant Saudi and international cybersecurity frameworks, standards, and controls.

• Professional certifications such as CISSP, CISM, CRISC, or equivalent are preferred.

• Proven experience in leading cybersecurity programs and strategic initiatives and engaging with senior stakeholders.

• Strong leadership, risk management, decision-making, stakeholder management, and executive communication skills.

Only candidates whose experience closely aligns with the requirements of the role will be contacted.