Chief Information Security Officer (CISO)

Obrela; Riyadh; On-site; SAR 400,000 - 600,000; Full time

Job summary

A leading cybersecurity firm is seeking a Chief Information Security Officer (CISO) to oversee security strategy, compliance with local regulations, and incident response capabilities. The ideal candidate will be a Saudi national with over 10 years of cybersecurity experience, including 5 years in leadership. Industry certifications like CISSP or CISM are required. This role offers competitive salary, bonuses, and a flexible work schedule.

Benefits

Competitive salary and performance-based bonuses

Professional development opportunities

Flexible work schedule

Collaborative work environment

Qualifications

• Saudi nationality is mandatory in line with national employment regulations.
• Minimum of 10 years’ experience in cybersecurity, including 5 years in a senior leadership role.
• In-depth understanding of local regulatory requirements and global standards.

Responsibilities

• Develop and lead the organization’s overall information security strategy.
• Ensure adherence to local cybersecurity regulations.
• Oversee incident response and threat detection capabilities.

Skills

Regulatory compliance

Enterprise risk management

Operational cybersecurity

Leadership

Team-building

Bilingual in Arabic and English

Education

Bachelor's degree in Cybersecurity or related field

Master’s degree preferred

Tools

CISSP

CISM

CISA

Job description

We are seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead our cybersecurity vision, strategy, and execution. This executive role is central to driving enterprise-wide security initiatives and safeguarding both internal and client-facing environments. The successful candidate must be a Saudi national with deep expertise in regulatory compliance, enterprise risk management, and operational cybersecurity, particularly in alignment with national frameworks such as SAMA, NCA, and CITC.

Key Responsibilities

• Develop and lead the organization’s overall information security strategy.
• Ensure full adherence to local cybersecurity regulations, including SAMA, NCA ECC/CCC, and CITC guidelines.
• Oversee the planning, execution, and continuous improvement of incident response and threat detection capabilities.
• Establish and maintain cybersecurity governance, risk policies, and awareness programs.
• Provide strategic cybersecurity guidance to executive leadership and the board, including risk posture assessments and security investment planning.

Required Qualifications

• Saudi nationality is mandatory, in line with national employment regulations.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field (Master’s degree preferred).
• Minimum of 10 years’ experience in cybersecurity, with at least 5 years in a senior leadership capacity.
• Industry-recognized certifications such as CISSP, CISM, CISA, or equivalent.
• In-depth understanding of both local regulatory requirements and global standards (e.g., ISO 27001, NIST).
• Proven background in regulated industries such as finance, government, telecommunications, or critical infrastructure.
• Strong leadership and team-building capabilities, with a track record of leading high-performing security teams.
• Bilingual fluency in Arabic and English, with excellent communication and presentation skills.

Benefits

• Competitive salary and performance-based bonuses
• Professional development opportunities and certifications
• Flexible work schedule and semi-remote work options
• Collaborative and innovative work environment