The Cloud Security team at the company is responsible for the security assurance of enterprise businesses and the underlying cloud platform. This role involves ensuring security architecture, SDLC, vulnerability management, incident response, and compliance. The Chief Information Security Officer (CISO) will oversee the overall cybersecurity posture of the organization and ensure compliance with relevant cybersecurity laws and frameworks within the Kingdom of Saudi Arabia, including the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC).
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
The CISO will provide independent leadership across cybersecurity governance, risk management, and security operations, ensuring that cybersecurity risks are identified, managed, and reported in alignment with the organization's risk appetite and regulatory expectations. This position collaborates closely with senior executives, contributing to strategic outcomes, reducing risk exposure, and driving secure innovation.
Responsibilities:
- Establish and maintain enterprise-wide cybersecurity governance following SAMA CSF and NCA ECC requirements.
- Advise executive management on cybersecurity risks, threats, and control effectiveness.
- Oversee the cybersecurity risk management framework and ensure compliance with applicable regulations and industry best practices.
- Manage cybersecurity operations including monitoring, detection, vulnerability management, and incident response.
- Ensure effective incident response and cyber crisis management.
- Identify and manage third-party cybersecurity risks.
- Develop national cybersecurity talent in alignment with Saudization and promote cybersecurity awareness.
Qualifications:
Minimum Qualifications:
- Bachelor’s degree in computer science, computer engineering, information technology, or a related field.
- 5+ years of relevant experience in security strategy, cybersecurity governance, risk management, or related domains.
- Knowledge of security frameworks such as OWASP, SANS CWE Top 25, ISO 27001, PCI DSS, NIST, and SAMA/NCA frameworks.
- Proven executive leadership in cybersecurity.
Preferred Qualifications:
- CISSP, CISM, CCSP, GIAC Certifications.
- Experience with end-to-end security design and a strategic roadmap for cloud security products and services.
Location: Riyadh, Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time
About the company:
Founded in 2012, the company's mission is to inspire creativity and enrich life through its suite of innovative products, including TikTok and CapCut. The company aims to create value and enrich life while fostering diversity and inclusion within its global workforce.
