Chief Information Security Officer (CISO)

About the role

We are looking for an experienced and strategic Chief Information Security Officer (CISO) to lead our cybersecurity function. The CISO will protect information assets, systems, cloud infrastructure, and digital services while aligning with Saudi Central Bank (SAMA) and National Cybersecurity Authority (NCA) frameworks.

Key responsibilities

• Develop, implement and maintain the company’s cybersecurity strategy, policies, standards and procedures.
• Ensure governance frameworks align with SAMA CSF, NCA regulations and industry best practices.
• Oversee cybersecurity architecture to embed security requirements across all technology solutions.
• Define and monitor cybersecurity KPIs and KRIs, providing regular reports to senior management and the Board.
• Establish and manage the cybersecurity risk management framework, conducting periodic risk assessments and mitigation planning.
• Lead Security Operations Center (SOC) activities, threat monitoring, vulnerability management and incident response.
• Maintain compliance with SAMA CSF, NCA Essential Cybersecurity Controls and support regulatory audits.
• Govern cloud security and conduct security reviews of third‑party vendors and service providers.

Required profile

• Proven senior leadership experience in information security and cyber risk management.
• Ability to act as a trusted advisor to executive management and the Board of Directors.
• Strong knowledge of Saudi regulatory requirements (SAMA, NCA) and international best practices.
• Excellent communication skills for reporting and stakeholder engagement.

Required skills

• Security Operations Center (SOC) management
• Cloud security governance
• Threat monitoring
• Vulnerability management
• Cyber threat intelligence analysis