Cyber Security Architect (Immediate Joiner)

The company is seeking an experienced Cybersecurity Architect to lead security governance, compliance, risk management, and technical security initiatives across the organization. The ideal candidate will be responsible for implementing ISO 27001:2022, ensuring compliance with various regulations, and developing cybersecurity policies and procedures. Key responsibilities include conducting vendor security assessments, performing penetration testing, managing security operations, and delivering cybersecurity awareness training.

Key Responsibilities:

• Lead ISO 27001:2022 implementation, risk assessments, and compliance programs.
• Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and other relevant regulations.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Conduct vendor security assessments and third-party risk reviews.
• Perform penetration testing and vulnerability assessments for diverse environments.
• Manage SIEM, threat monitoring, incident response, and overall security operations.
• Support secure architecture for cloud, applications, APIs, and IoT solutions.
• Prepare executive reports, security metrics, and risk dashboards.

Requirements:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
• 8–12 years of experience in Cybersecurity, Security Architecture, or Governance, Risk, and Compliance (GRC).
• Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK.
• Hands-on experience in penetration testing, vulnerability management, and security operations.
• Excellent communication and stakeholder management skills.
• Candidate must be located in Saudi Arabia.

Preferred Certifications:

• CISM
• CISA
• ISO 27001 Lead Auditor/Lead Implementer
• CAP (Certified AppSec Practitioner) or equivalent

Explore the opportunity to enhance cybersecurity initiatives and lead critical projects at the company.