Cyber Security Architect

Position Overview

We are looking for a seasoned Cybersecurity Architect to spearhead security governance, compliance, risk management, and technical security efforts within our organization in Riyadh, Saudi Arabia.

Key Duties

• Lead the deployment of ISO 27001:2022 standards, conduct risk evaluations, and administer compliance initiatives.
• Ensure adherence to regional regulations including SAMA-CSF, NCA, PDPL, and CST CRF.
• Develop and regularly update cybersecurity policies, standards, and protocols.
• Execute security evaluations for vendors and perform third-party risk analyses.
• Carry out penetration testing and vulnerability scans across web, mobile, API, and IoT platforms.
• Oversee SIEM tools, monitor threats, and manage incident responses and security operations.
• Support the design and maintenance of secure cloud architecture, applications, APIs, and IoT technologies.
• Provide training sessions focused on cybersecurity awareness and secure coding practices.
• Compile executive-level reports, security metrics, and risk dashboards for leadership review.

Qualifications

• A Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or closely related disciplines.
• 8 to 12 years of professional experience in Cybersecurity, Security Architecture, or Governance, Risk Management, and Compliance (GRC).
• Deep knowledge of ISO 27001 implementation, OWASP Top 10 vulnerabilities, PTES methodologies, and the MITRE ATT&CK framework.
• Proven track record of hands-on experience in penetration testing, vulnerability management, and managing security operations.
• Strong communication capabilities and skillful stakeholder engagement.
• Must be currently located within the Kingdom of Saudi Arabia (KSA).

Preferred Certifications

• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• ISO 27001 Lead Auditor or Lead Implementer
• CAP (Certified Application Security Practitioner) or equivalent credentials