CyberSecurity Architect

The company is seeking an experienced Cybersecurity Architect to lead security governance, compliance, risk management, and technical security initiatives across the organization.

Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time

Key Responsibilities:

• Lead ISO 27001:2022 implementation, risk assessments, and compliance programs.
• Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and related regulations.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Conduct vendor security assessments and third-party risk reviews.
• Perform penetration testing and vulnerability assessments for web, mobile, API, and IoT environments.
• Manage SIEM, threat monitoring, incident response, and security operations.
• Support secure architecture for cloud, applications, APIs, and IoT solutions.
• Deliver cybersecurity awareness and secure coding training.
• Prepare executive reports, security metrics, and risk dashboards.

Requirements:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
• 8–12 years of experience in Cybersecurity, Security Architecture, or GRC.
• Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK.
• Hands-on experience in penetration testing, vulnerability management, and security operations.
• Excellent communication and stakeholder management skills.
• Candidate must be in KSA.

Preferred Certifications:

• CISM
• CISA
• ISO 27001 Lead Auditor/Lead Implementer
• CAP (Certified AppSec Practitioner) or equivalent