Enterprise Security Architecture Manager

About the role

Riyadh Air is seeking an experienced Enterprise Security Architecture Manager to lead the design and implementation of security frameworks across its digital airline platform. The role will shape security strategy, align it with business goals, and ensure robust protection for systems, data, and applications.

Key responsibilities

• Develop and maintain enterprise security architecture using TOGAF and SABSA methodologies.
• Design and implement security solutions for cloud environments, identity and access management, data protection, and API security.
• Conduct regular security assessments, identify gaps, and provide remediation recommendations.
• Collaborate with IT, DevOps, business units, and external vendors to embed security by design.
• Guide the integration of security controls into new and existing projects.

Required profile

• Minimum 7 years of experience in cybersecurity, including at least 2 years in security architecture.
• Hands‑on experience with cloud platforms and related security solutions.
• Relevant certifications such as TOGAF, SABSA, CISSP, CISM, CCSP or Microsoft Azure Security.
• Proven ability to work cross‑functionally and communicate security concepts to technical and non‑technical stakeholders.

Required skills

• TOGAF
• SABSA
• CISSP
• CISM
• CCSP
• Microsoft Azure Security
• Cloud security
• Identity and Access Management (IAM)
• Data protection
• API security