Head of Security

About the role

As the Head of Security at Salla, you will be the most senior security authority, shaping strategy, building the team, and owning the controls that protect the platform, people, and merchants. You will translate risk into business language for executives and the Board, turning security into a competitive advantage.

Key responsibilities

• Define and evolve the enterprise security strategy, roadmap, and operating model across cloud, network, endpoint, physical, and GRC.
• Brief the executive team and Board on cyber‑risk posture, investment priorities, and regulatory exposure.
• Manage the security budget, headcount plan, and tooling portfolio, delivering measurable ROI.
• Lead cloud security (AWS preferred), including landing‑zone hardening, network segmentation, secrets management, and workload protection.
• Govern Infrastructure‑as‑Code, container/Kubernetes security, and CI/CD pipeline integrity.
• Own network security architecture, DDoS mitigation, WAF, zero‑trust network access, and edge security.
• Lead endpoint protection (EDR/XDR), device hardening, mobile device management, and patch management.
• Oversee physical security for offices in Makkah and other sites, including access control and CCTV.
• Develop and enforce IAM and Zero‑Trust strategies across cloud and corporate systems.

Required profile

• Saudi national.
• Proven senior security leadership experience, capable of influencing executives and boards.
• Strong understanding of enterprise‑wide security domains and regulatory requirements.

Required skills

• AWS cloud security.
• Infrastructure‑as‑Code security.
• Container and Kubernetes security (image scanning, admission control, runtime protection).
• CI/CD pipeline security.
• Cloud Security Posture Management and CIS benchmark compliance.
• Network security architecture, DDoS mitigation, Web Application Firewall, zero‑trust networking.
• Endpoint Detection & Response (EDR/XDR), mobile device management, disk encryption.
• Vulnerability and patch management with remediation SLAs.
• Physical security systems (CCTV, access control, visitor management).
• Identity & Access Management (Zero Trust) across cloud and corporate environments.

What we offer

• Opportunity to shape security for a fast‑growing, publicly‑listed ready e‑commerce platform.
• Leadership visibility with executive team and Board.
• Competitive compensation and benefits package.