We are seeking a highly experienced Senior Data Security Consultant to serve as the Subject Matter Expert (SME) and Solution Architect for enterprise cryptography, Public Key Infrastructure (PKI), and data protection solutions within the Data Protection / Data Security Tower. The ideal candidate will lead end-to-end architecture, implementation, governance, and optimization of encryption and key management frameworks supporting a Managed Security Services (MSS) program. This role requires deep hands-on expertise in the company cryptographic platforms, HSM integration, and regulatory compliance within Saudi cybersecurity frameworks.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location: Riyadh, Saudi Arabia (On-site)
Work Conditions:
- Full-time
- Shift Coverage: 8×5 operational coverage (morning and evening shifts)
- On-call rotation for P1 and P2 incidents
Key Responsibilities:
- Define and lead the enterprise PKI and cryptographic key management strategy, ensuring alignment with MSS objectives and national regulatory frameworks including National Cybersecurity Authority (NCA) and Communications, Space & Technology Commission (CST).
- Architect and design multi-tier PKI environments using the company NCM and the company NCLM (MANDATORY).
- Lead implementation and lifecycle management of Hardware Security Modules (HSM), specifically Thales HSM (MANDATORY), ensuring secure key generation, storage, rotation, and high availability.
- Evaluate and oversee readiness of Quantum Key Distribution (QKD) technologies and next-generation encryption frameworks.
- Establish governance frameworks for:
- Cryptographic algorithm selection
- Key lifecycle management
- Certificate hierarchy design
- Cryptographic resilience and policy enforcement
- Conduct security architecture reviews, audits, and compliance assessments aligned with:
- ISO 27001
- NCA Cybersecurity Controls
- CST regulatory frameworks
- Collaborate with Infrastructure, Identity & Access Management, and End-User Device towers to ensure secure interoperability across hybrid environments.
- Lead Proof of Concepts (PoCs) for advanced cryptographic solutions and quantum-resistant encryption standards.
- Provide expert technical leadership, mentor engineering teams, and ensure full audit readiness of all data protection systems.
Mandatory Requirements (Non-Negotiable):
- Minimum 8+ years of experience in PKI design, cryptographic architecture, and enterprise data protection operations.
- Hands-on expertise in the company NCM and the company NCLM platforms (MANDATORY).
- Proven experience implementing and managing Thales HSM solutions (MANDATORY).
- Strong experience designing PKI for hybrid and enterprise-scale infrastructures.
- In-depth knowledge of:
- Cryptographic algorithms (RSA, ECC, SHA-2/3, AES, etc.)
- Certificate Authority (CA) hierarchy design
- Key lifecycle management
- Quantum-safe cryptographic principles
- Experience working within Saudi cybersecurity compliance frameworks: NCA, CST.
- Experience supporting ISO 27001-aligned audit programs.
Preferred Certifications:
- the company NCM / NCLM Expert Certification
- Thales Certified Architect (or equivalent HSM certification)
- CISSP-ISSAP
- CCSP
- ISO 27001 Lead Implementer
Educational Qualifications:
Bachelor’s or Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related discipline.
Language Requirements:
Fluency in English is preferred.
