Senior Consultant – Senior Manager| Cyber Operate | Security Architecture | KSA

Location
Riyadh

About the Role
As a Senior Consultant – Senior Manager, you will demonstrate and develop your capabilities in several key areas of cybersecurity. Your role will involve setting the architecture and standards that guide cybersecurity practices, assuring new solutions, designing key security capabilities, and working across programs to maintain an up-to-date view of architecture risks and exceptions. You will collaborate with various teams to ensure that security measures align with business objectives and industry standards.

Key Responsibilities

• Set the architecture and standards:
  • Define and maintain the cybersecurity reference architecture, design principles, and reusable security patterns, and publish them as standards for projects to follow.
  • Write technical security standards for identity, network, cloud, endpoint, data protection, and application security, mapped to NCA ECC, CCC, DCC, and NIST SP 800-53.
  • Design the zero trust target architecture and create a phased path to achieve it.

• Assure new solutions:
  • Conduct security architecture reviews and provide design approvals for new projects, platforms, and vendor solutions, issuing clear review reports with conditions.
  • Lead threat modeling for critical and guest-facing systems, focusing on significant threats rather than generic lists.
  • Clearly communicate design trade-offs to engineers, project managers, and executives, maintaining focus on unacceptable risks.

• Design key security capabilities:
  • Develop security controls for identity and privileged access, network segmentation, secure remote access, encryption and key management, and cloud security posture.
  • Integrate security into the software development lifecycle (SDLC) and DevSecOps pipelines in collaboration with engineering and AppSec teams.
  • Evaluate and select security technologies with practical proof-of-concept testing, maintaining a security technology roadmap.

• Work across the programme:
  • Collaborate with the Strategy team to ensure architecture supports the roadmap and with OT Security on IT/OT boundaries.
  • Keep an up-to-date view of architecture risks and exceptions, reporting them to governance stakeholders.

Leadership Capabilities

• Build an understanding of the organization's purpose and values; explore opportunities for impact.
• Show strong commitment to personal learning and development; act as a brand ambassador to attract top talent.
• Demonstrate personal accountability for keeping performance on track.
• Focus on developing effective communication and relationship-building skills.
• Understand how daily work contributes to team and business priorities.

Qualifications

• Experience: 6-10 years total
• Education: Bachelor’s in computer science, engineering, or a related field
• Technical Skills:
  • Hands-on depth in at least two of: identity and access, network security, cloud security (Azure, AWS, or GCP), application security.
  • Experience producing security architectures or design reviews for real systems in production.
  • Working knowledge of NCA ECC, CCC, DCC, and NIST SP 800-53.
  • Clear written and verbal communication in English.
  • SABSA or TOGAF training or practice.
  • Zero trust design and implementation experience (NIST SP 800-207).
  • Experience with large digital, hospitality, smart city, or critical infrastructure environments.
  • Arabic language proficiency is a bonus.
  • At least one certification preferred: CISSP (ISSAP a plus), SABSA, CCSP; valued certifications include TOGAF, AZ-500 / SC-100, AWS Certified Security – Specialty, CCSK.
• Frameworks Knowledge: Familiarity with NCA ECC-2:2024, NCA CCC, NCA DCC, NIST SP 800-53 Rev 5, NIST SP 800-207, ISO/IEC 27001/27002:2022, SABSA, TOGAF.