Cybersecurity Architect – Immediate Joiner

About the role

We are looking for an experienced Cybersecurity Architect to lead security governance, compliance and technical security initiatives across our organization in Saudi Arabia. The role requires immediate availability and will be responsible for shaping our security posture across cloud, applications, APIs and IoT environments.

Key responsibilities

• Lead ISO 27001:2022 implementation, risk assessments and compliance programs.
• Ensure adherence to SAMA‑CSF, NCA, PDPL, CST CRF and related regulations.
• Develop and maintain cybersecurity policies, standards and procedures.
• Conduct vendor security assessments and third‑party risk reviews.
• Perform penetration testing and vulnerability assessments for web, mobile, API and IoT platforms.
• Manage SIEM, threat monitoring, incident response and security operations.
• Support secure architecture design for cloud, applications, APIs and IoT solutions.
• Deliver cybersecurity awareness and secure‑coding training.
• Prepare executive reports, security metrics and risk dashboards.

Required profile

• Bachelor's or Master's degree in Cybersecurity, Computer Science or a related field.
• 8–12 years of experience in Cybersecurity, Security Architecture or GRC.
• Strong expertise in ISO 27001, OWASP Top 10, PTES and MITRE ATT&CK.
• Hands‑on experience with penetration testing, vulnerability management and security operations.
• Excellent communication and stakeholder management skills.
• Candidate must be based in Saudi Arabia.
• Preferred certifications: CISMCISA, ISO 27001 Lead Auditor/Implementer, CAP (Certified AppSec Practitioner) or equivalent.

Required skills

• ISO 27001
• OWASP Top 10
• PTES
• MITRE ATT&CK
• Penetration testing
• Vulnerability assessment
• SIEM management
• Threat monitoring
• Incident response
• Security operations
• Cloud security architecture
• API security
• IoT security