Role Overview

Protect critical technical systems and sensitive data from cyber threats. Develop and implement comprehensive cybersecurity policies and procedures, ensure business continuity, enhance organizational readiness against cyber threats, and establish an integrated security framework aligned with digital transformation initiatives.

Key Responsibilities

• Assess the current security posture of digital infrastructures and financial systems; identify technical and organizational vulnerabilities
• Develop and implement a cybersecurity strategy aligned with organizational goals and national/international standards (e.g., NIST, ISO 27001, SAMA Cybersecurity Framework)
• Establish a permanent cybersecurity unit defining responsibilities, operational scope, and control functions
• Develop policies and procedures for data protection, identity and access management (IAM), and encryption
• Continuously monitor security incidents using SIEM (Security Information and Event Management) systems
• Implement Incident Response Plans to quickly contain and mitigate threats
• Conduct penetration testing and regular security audits of critical systems
• Manage network and digital communications security to protect internal and external information channels
• Design a data classification system and enforce appropriate access controls
• Analyze emerging cyber threats and implement proactive mitigation plans
• Collaborate with regulatory and industry stakeholders to exchange cybersecurity insights
• Ensure compliance of systems with security standards and digital transformation initiatives
• Develop Business Continuity and Disaster Recovery Plans (BCP/DRP) with operational and technical teams
• Assess third-party security for contractors and technology providers
• Conduct cybersecurity awareness training for staff to strengthen security culture
• Provide periodic reports on overall security posture and readiness
• Participate in technical committees and share best practices in cybersecurity
• Oversee data security implementation in new digital systems
• Analyze and mitigate cyber threats to payment and settlement systems (RTGS, ACH, Instant Payments)
• Coordinate with national cybersecurity teams to ensure compliance with standards for critical infrastructure protection

Qualifications

• Bachelor's degree in:
  • Computer Engineering
  • Information Security
  • Information Systems
• Master's degree in Cybersecurity or Network Engineering is a plus
• Minimum 10 years of experience in cybersecurity
• At least 5 years in critical financial or banking environments

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CEH (Certified Ethical Hacker)
• ISO 27001 Lead Implementer
• CompTIA Security+

Languages

• Arabic
• English (advanced)

Skills & Knowledge

• Network, server, and database security management
• Vulnerability assessment and risk analysis for critical systems
• Designing risk-based comprehensive security policies
• Monitoring systems using SIEM and IDS/IPS tools
• Implementing incident response and conducting regular security tests
• Leadership and team management
• Decision-making and problem-solving
• Stakeholder management and partnership building
• Collaboration and teamwork
• Analytical and critical thinking