Head of Cyber ​​Security

Job description

About the Role the employer is seeking an experienced Head of Cyber Security to lead cybersecurity operations, governance, risk management, and regulatory compliance. This full-time position is based in Jeddah, Makkah Province. The role involves overseeing security across payment platforms and technology infrastructure, with a focus on SAMA compliance. Key Responsibilities Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with the SAMA Cyber Security Framework (CSF) and applicable regulatory requirements. Lead cybersecurity risk assessments, compliance reviews, internal audits, and remediation activities. Oversee daily security operations, threat monitoring, detection, and incident response activities. Manage security monitoring solutions, including SIEM, EDR/XDR, firewalls, and intrusion detection/prevention systems (IDS/IPS). Lead cybersecurity incident investigations, root cause analysis, and corrective actions. Oversee network security controls, firewall configurations, access management, and infrastructure protection. Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC). Ensure appropriate security controls are implemented across web applications, APIs, mobile applications, and payment platforms. Lead vulnerability assessments, security testing, and remediation tracking. Evaluate cybersecurity risks across applications, networks, cloud environments, and third-party integrations. Lead cybersecurity initiatives, manage security projects, and mentor cybersecurity team members. Develop and deliver cybersecurity awareness and training programs. Qualifications and Experience A minimum of 5 to 10 years of cybersecurity experience is required. Demonstrated experience within SAMA-licensed financial institutions or FinTech companies. Proven hands-on experience implementing SAMA cybersecurity requirements. Experience managing security operations and responding to security incidents. Ability to lead cybersecurity initiatives effectively. Technical Skills Proficiency in managing security monitoring solutions (SIEM, EDR/XDR, firewalls, IDS/IPS). Understanding of network security controls and access management. Knowledge of integrating security into the Software Development Life Cycle (SDLC). Familiarity with secure architecture reviews, application security assessments, and penetration testing. Leadership and Communication Ability to coordinate with IT, Engineering, Risk, Compliance, and business stakeholders. Skill in preparing cybersecurity KPIs, risk reports, and security posture updates for senior management. Strong leadership capabilities to mentor team members and drive initiatives. Salary details will be discussed during the interview process

Requirements

• · Develop and deliver awareness and training programs in the field of cybersecurity
• · Qualifications and experience: A minimum of experience in the field of cybersecurity is required
• · Proven practical experience in implementing the cybersecurity requirements of the Saudi Arabian Monetary Agency
• · Experience in managing security operations and responding to security incidents

Skills