Chief Information Security Officer (CISO)

Obrela; Riyad Al Khabra; Hybrid; SAR 400,000 - 600,000; Full time

Job summary

A leading cybersecurity firm in Riyad Al Khabra seeks a seasoned Chief Information Security Officer (CISO). This role requires a Saudi national with extensive experience in cybersecurity, particularly in regulatory compliance and risk management. Responsibilities include developing the security strategy and ensuring adherence to local regulations. The ideal candidate should have over 10 years of experience, industry certifications, and bilingual proficiency in Arabic and English. Competitive salary and flexible work options offered.

Benefits

Competitive salary and performance-based bonuses

Professional development opportunities

Flexible work schedule

Collaborative work environment

Qualifications

• At least 10 years’ experience in cybersecurity, with 5+ in senior leadership.
• Strong understanding of local regulatory requirements and global standards.
• Proven background in regulated industries.

Responsibilities

• Develop and lead the organization’s information security strategy.
• Oversee incident response and threat detection capabilities.
• Provide strategic cybersecurity guidance to executive leadership.

Skills

Leadership

Regulatory compliance

Operational cybersecurity

Risk management

Bilingual communication

Education

Bachelor's degree in Cybersecurity, IT, or a related field

Master’s degree (preferred)

Tools

CISSP

CISM

CISA

Job description

We are seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead our cybersecurity vision, strategy, and execution. This executive role is central to driving enterprise-wide security initiatives and safeguarding both internal and client-facing environments. The successful candidate must be a Saudi national with deep expertise in regulatory compliance, enterprise risk management, and operational cybersecurity, particularly in alignment with national frameworks such as SAMA , NCA , and CITC .

Key Responsibilities

• Develop and lead the organization’s overall information security strategy.
• Ensure full adherence to local cybersecurity regulations, including SAMA, NCA ECC / CCC, and CITC guidelines.
• Oversee the planning, execution, and continuous improvement of incident response and threat detection capabilities.
• Establish and maintain cybersecurity governance, risk policies, and awareness programs.
• Provide strategic cybersecurity guidance to executive leadership and the board, including risk posture assessments and security investment planning.

Required Qualifications

Saudi nationality is mandatory, in line with national employment regulations.

Bachelor's degree in Cybersecurity, Information Technology, or a related field (Master’s degree preferred).

Minimum of 10 years’ experience in cybersecurity, with at least 5 years in a senior leadership capacity.

Industry-recognized certifications such as CISSP, CISM, CISA , or equivalent.

In-depth understanding of both local regulatory requirements and global standards (e.g., ISO 27001, NIST).

Proven background in regulated industries such as finance, government, telecommunications, or critical infrastructure.

Strong leadership and team-building capabilities, with a track record of leading high-performing security teams.

Bilingual fluency in Arabic and English, with excellent communication and presentation skills.

Benefits

Competitive salary and performance-based bonuses

Professional development opportunities and certifications

Flexible work schedule and semi-remote work options

Collaborative and innovative work environment