Senior Security Architect (NCA, DLP, Network Security)

Overview

We are seeking a highly qualified Senior Security Architect to lead the design, implementation, and governance of enterprise security frameworks with particular emphasis on National Cybersecurity Authority (NCA) compliance, Data Loss Prevention (DLP), and network security. This position is based in Al Khobar, Saudi Arabia and requires extensive cybersecurity experience aligned with regulatory standards.

Key Responsibilities

• Develop and evaluate enterprise security architectures ensuring alignment with NCA Essential Cybersecurity Controls (ECC) and relevant regulatory frameworks.
• Design and manage comprehensive network security implementations including firewalls, Web Application Firewalls (WAF), VPNs, network segmentation, Zero Trust strategies, and intrusion prevention systems.
• Implement Data Loss Prevention mechanisms safeguarding sensitive data across endpoints, networks, email, and cloud services.
• Perform security architecture assessments, threat modeling, risk analyses, and identify security gaps.
• Establish security policies, technical standards, and reference models based on business objectives and compliance mandates.
• Partner with infrastructure, cloud, application security, and Security Operations Center (SOC) teams to ensure seamless integration of security controls.
• Assess security products, guide proof-of-concept trials, and advise on technical deployment.
• Assist with security audits, compliance checks, remediation efforts, and risk reporting procedures.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• More than 5 years of professional experience in cybersecurity, especially in enterprise security architecture roles.
• Deep understanding of NCA ECC requirements and practical experience in implementing or auditing cybersecurity controls aligned with these standards.
• Proficiency or architectural expertise in DLP technologies such as Digital Guardian, Forcepoint, Symantec, or Microsoft Purview.
• Comprehensive knowledge of network security technologies including firewalls, WAF, IDS/IPS, VPNs, and network segmentation techniques.
• Familiarity with Zero Trust Architecture, Identity and Access Management (IAM), vulnerability management, Security Information and Event Management (SIEM), and incident response frameworks.
• Desirable certifications include CISSP, CISM, CCSP, or vendor-specific cybersecurity credentials.
• Excellent communication abilities combined with stakeholder management and technical documentation skills.
• Preferred experience within regulated enterprise sectors in Saudi Arabia, demonstrating awareness of NCA cybersecurity regulations.