Chief Information Security Officer

foregroundllc; Riyadh; On-site; SAR 900,000 - 1,300,000; Full time

Job summary

foregroundllc is seeking a Chief Information Security Officer to lead enterprise-wide cybersecurity strategy, risk management, and regulatory compliance for a digital-first organization with high data sensitivity. The CISO will oversee security architecture, governance, and incident response while aligning posture with regulatory standards.

The role includes advising the board and managing third-party security providers and internal teams.

Qualifications

• Senior leadership experience in cybersecurity for regulated or enterprise settings.
• Proven ability to navigate risk frameworks and compliance requirements.
• Strong communication skills to brief executives and the board.

Responsibilities

• Set and drive the enterprise cybersecurity strategy and roadmap.
• Oversee risk management, governance frameworks, and compliance programs.
• Lead security architecture, incident response, and resilience initiatives.
• Align cybersecurity posture with national standards and regulatory expectations.
• Advise the board and senior leadership on cyber risk and security posture.
• Manage relationships with third-party security providers and internal security teams.

Skills

Senior cybersecurity leadership

Regulated/enterprise environments

Risk frameworks

Compliance

Executive communication

Security operations

Saudi regulatory exposure

Job description

Our Client

Our client is a digital-first organisation operating critical platforms with high data sensitivity and regulatory oversight. Cybersecurity is a strategic priority for the business.

The Role

The Chief Information Security Officer will lead enterprise-wide cybersecurity strategy, risk management, and compliance. This role will oversee security architecture, governance frameworks, and incident response. A key mandate will be aligning cybersecurity posture with regulatory and national standards. The CISO will advise executive leadership and the board on cyber risk and resilience. The role will also manage third-party security providers and internal security teams.

Candidate Profile

Candidates must have senior cybersecurity leadership experience within regulated or enterprise environments. Strong exposure to risk frameworks, compliance, and security operations is essential. Experience in Saudi Arabia or similar regulatory markets is highly preferred. The ideal profile combines technical depth with executive communication skills. Industry certifications are strongly valued.