Senior Security Architect (NCA, DLP, Network Security)

About the role

An experienced Senior Security Architect is sought in Al Khobar, Saudi Arabia, to design, implement and govern enterprise security architectures. The role centres on NCA compliance, Data Loss Prevention (DLP) and network security, covering framework development, architecture reviews and alignment with regulatory requirements.

Key responsibilities

• Design and review enterprise security architectures aligned with NCA Essential Cybersecurity Controls (ECC) and other regulatory frameworks.
• Architect and oversee network security solutions such as firewalls, WAF, VPN, network segmentation, Zero Trust and intrusion prevention systems.
• Design and implement DLP strategies protecting sensitive data across endpoints, networks, email and cloud environments.
• Carry out security architecture reviews, threat modelling, risk assessments and security gap analyses.
• Define security policies, technical standards and reference architectures aligned with business and compliance needs.
• Work with infrastructure, cloud, application security and SOC teams to integrate security controls.
• Evaluate security technologies, lead proof-of-concept exercises and guide solution implementation.
• Support security audits, compliance assessments, remediation and risk reporting.

Required profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field.
• 5+ years of cybersecurity experience, with significant enterprise security architecture experience.
• Strong knowledge of NCA ECC requirements and hands-on experience implementing or assessing cybersecurity controls.
• Experience in regulated enterprise environments in Saudi Arabia is preferred, with knowledge of NCA cybersecurity requirements.

Required skills

• DLP solutions such as Digital Guardian, Forcepoint, Symantec or Microsoft Purview.
• Firewalls, WAF, IDS/IPS, VPN and network segmentation.
• Zero Trust, IAM, vulnerability management, SIEM and incident response.
• Certifications such as CISSP, CISM, CCSP or vendor-specific ones are preferred.