Cybersecurity Director – Government Entity (Saudi Arabia)

About the role

We are looking for a senior cybersecurity leader to head the cybersecurity function of a Saudi Arabian government entity. The Cybersecurity Director will shape strategy, oversee risk management, and ensure the protection of critical information assets across the organization.

Key responsibilities

• Develop and implement the organization’s Cybersecurity Strategy, roadmap and operating model.
• Establish, maintain and oversee cybersecurity policies, standards, procedures and controls.
• Lead risk management activities, including identification, assessment, treatment and ongoing monitoring.
• Protect information systems, networks, applications, data and technology assets from cyber threats.
• Oversee incident response readiness, response, recovery and post‑incident improvement.
• Manage vulnerability management, security assessments, penetration testing and remediation programmes.
• Ensure compliance with Saudi cybersecurity regulations, frameworks and requirements.
• Conduct third‑party cybersecurity risk assessments and manage related risks.
• Define and report cybersecurity KPIs and KRIs to senior management and committees.
• Develop and run cybersecurity awareness programmes to strengthen the security culture.
• Collaborate with Technology, Risk Management, Business Continuity, Internal Audit and other functions for an integrated approach.
• Build, lead and develop the cybersecurity team, enhancing technical and leadership capabilities.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field; Master’s preferred.
• Significant professional experience in cybersecurity or information security, including leadership or managerial roles.
• Strong background in governance, risk management, compliance and incident management.
• Knowledge of Saudi and international cybersecurity frameworks, standards and controls.
• Professional certifications such as CISSP, CISM, CRISC or equivalent preferred.
• Proven ability to lead strategic cybersecurity programmes and engage senior stakeholders.
• Excellent leadership, decision‑making and executive communication skills.