IT Operations and Security Lead

About the Role

We seek a dedicated IT & Security Lead responsible for overseeing all IT operations and information security for our Riyadh market office. Eligible candidates must already hold the legal right to work in Saudi Arabia as visa sponsorship is not provided. This role requires expert-level, hands-on knowledge in both IT operations and information security domains.

Key Responsibilities

• Manage and enforce the comprehensive information security control framework including vulnerability management, endpoint security enhancements, EDR/XDR systems, identity protection, email and phishing safeguards, and implementing security awareness initiatives.
• Act as the initial responder for security incidents encompassing detection, assessment, containment, evidence gathering, escalation, and post-incident analysis.
• Oversee the complete operational status and security of the office network: setup and maintenance of routing, switching, VLANs, next-generation firewalls (NGFW), intrusion detection and prevention systems (IDS/IPS), VPNs, Wi-Fi networks, and Internet service provider relations.
• Administer Microsoft 365 environment, Entra ID, and mobile device management solutions covering identity lifecycle management, conditional access policies, multi-factor authentication, device compliance monitoring, and onboarding/offboarding processes.
• Provide primary IT support for the GCC region, managing ticket resolutions, endpoint deployment, and service quality assurances.
• Coordinate with local vendors, handle IT procurement processes, and maintain the IT asset registry throughout its lifecycle.
• Ensure compliance with financial regulatory and data protection requirements, maintaining audit-ready documentation and evidence.
• Lead a local IT team or managed service providers; spearhead IT initiatives and office expansion projects.
• Regularly report on security posture, risk assessments, and remediation effects to senior management, including the Head of Cloud & Operations and Chief Compliance Officer.

Required Qualifications and Experience

• Between 6 and 8+ years in progressive IT operations roles, with at least 2 to 3 years as the main IT decision-maker at a site or regional level.
• Deep practical experience in information security, particularly with endpoint detection and response, vulnerability management, security baselines, phishing defenses, and security alert triage.
• Active participation in incident response including threat detection, triage, containment, evidence preservation, escalation, and review.
• Expertise in network engineering and security tasks such as managing routing and switching, designing VLANs, configuring NGFWs (Fortinet, Palo Alto, Cisco, etc.), IDS/IPS deployment, VPNs (site-to-site and remote access), and Wi-Fi management.
• Proficient in Microsoft 365 and Entra ID administration, including identity lifecycle, conditional access, MFA, Exchange Online, SharePoint, and Intune/MDM.
• Skilled in endpoint administration and security on Windows and macOS platforms, including imaging, patch management, disk encryption, EDR agent deployment, and configuration standardization.
• Experience working within established security frameworks such as ISO 27001, SOC 2, NIST CSF, or CIS Controls and adept at producing audit-ready control evidence.
• Background in regulated sectors such as financial services, fintech, banking, or insurance, with direct audit and compliance exposure.
• Leadership experience managing teams, contractors, or outsourced service providers.
• Professional English fluency plus proficiency in the primary language relevant to the market.

Preferred Qualifications

• Security certifications such as CompTIA Security+, CySA+, GCIH, ISO 27001 Lead Implementer, CISSP, or CISM.
• Networking certifications including CCNA/CCNP, CompTIA Network+, or Fortinet NSE.
• Microsoft certifications like SC-200, SC-300, MD-102, MS-102, or AZ-104.
• Experience with SIEM/SOAR platforms: Microsoft Sentinel, Splunk, or Elastic.
• Knowledge of financial regulatory frameworks relevant to the region (e.g., BNM RMiT, MAS TRM, HKMA TM-G-1) and associated data protection laws.
• Cloud platform administration and security experience at the operational level with AWS or Google Cloud Platform.
• Familiarity with scripting languages such as PowerShell, Bash, or Python for automation purposes.
• Experience in establishing IT and security infrastructures from the ground up, particularly as the initial IT hire in a market.