Cyber Security Director – Saudi Arabia

About the role

The organization, a leading player in Saudi Arabia’s regulated insurance sector, seeks a senior Cyber Security Director to shape and execute its enterprise-wide security strategy, ensure regulatory compliance, and enhance resilience across the business.

Key responsibilities

• Design and evolve security systems architecture aligned with emerging threats and business objectives.
• Lead post‑breach investigations, conduct impact analyses, and develop risk mitigation plans.
• Oversee identity and access management (IAM) protocols to protect critical assets and data.
• Manage external vendor and third‑party relationships, including security audits and compliance reviews.
• Ensure continuous compliance with IA, CCHI and other regulatory bodies through policy and control updates.
• Champion a dynamic cybersecurity strategy incorporating the latest intelligence, trends and regulatory updates.
• Brief the executive team and Board, acting as a key advisor and strategic partner.

Required profile

• 10–12 years of cybersecurity leadership experience, preferably in insurance or other highly regulated industries.
• Proven expertise in security architecture, incident response and regulatory compliance.
• Strategic thinker with hands‑on experience managing vendor ecosystems, IAM protocols and cyber‑risk frameworks.
• Hold certifications such as CISSP, CISM, CISA, CRISC or CGEIT.
• Must be a Saudi national to meet Saudization requirements.

Required skills

• Security architecture design
• Incident response and breach investigation
• Identity and Access Management (IAM)
• Vendor security audits and third‑party risk management
• Regulatory compliance frameworks (IA, CCHI, ISO, NIST, SOX, HIPAA, PCI‑DSS)
• Operating systems: Windows, Linux, UNIX
• Secure coding practices
• Threat detection technologies