Chief Information Security Officer (CISO)

OBRELA; Saudi Arabia; Hybrid; SAR 400,000 - 600,000; Full time

Job summary

A leading company is seeking a Chief Information Security Officer (CISO) to drive cybersecurity initiatives and ensure compliance with local laws in Saudi Arabia. The ideal candidate, a Saudi national, will have a track record of leadership and expertise in cybersecurity and risk management. Responsibilities include strategic guidance and developing risk policies while promoting a robust security environment.

Benefits

Competitive salary and performance-based bonuses

Professional development opportunities and certifications

Flexible work schedule and semi-remote work options

Collaborative and innovative work environment

Qualifications

• Minimum of 10 years’ experience in cybersecurity, with at least 5 years in senior leadership.
• Proven background in regulated industries such as finance, government, or telecommunications.

Responsibilities

• Develop and lead the organization’s overall information security strategy.
• Ensure adherence to local cybersecurity regulations, including SAMA and CITC guidelines.
• Oversee incident response and threat detection capabilities.

Skills

Regulatory compliance

Enterprise risk management

Operational cybersecurity

Leadership

Bilingual (Arabic and English)

Education

Bachelor's degree in Cybersecurity, Information Technology, or related field

Master’s degree (preferred)

Tools

CISSP

CISM

CISA

Job description

We are seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead our cybersecurity vision, strategy, and execution. This executive role is central to driving enterprise-wide security initiatives and safeguarding both internal and client-facing environments. The successful candidate must be a Saudi national with deep expertise in regulatory compliance, enterprise risk management, and operational cybersecurity, particularly in alignment with national frameworks such as SAMA, NCA, and CITC.

Key Responsibilities

• Develop and lead the organization’s overall information security strategy.
• Ensure full adherence to local cybersecurity regulations, including SAMA, NCA ECC/CCC, and CITC guidelines.
• Oversee the planning, execution, and continuous improvement of incident response and threat detection capabilities.
• Establish and maintain cybersecurity governance, risk policies, and awareness programs.
• Provide strategic cybersecurity guidance to executive leadership and the board, including risk posture assessments and security investment planning.

Required Qualifications

• Saudi nationality is mandatory, in line with national employment regulations.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field (Master’s degree preferred).
• Minimum of 10 years’ experience in cybersecurity, with at least 5 years in a senior leadership capacity.
• Industry-recognized certifications such as CISSP, CISM, CISA, or equivalent.
• In-depth understanding of both local regulatory requirements and global standards (e.g., ISO 27001, NIST).
• Proven background in regulated industries such as finance, government, telecommunications, or critical infrastructure.
• Strong leadership and team-building capabilities, with a track record of leading high-performing security teams.
• Bilingual fluency in Arabic and English, with excellent communication and presentation skills.

Benefits

• Competitive salary and performance-based bonuses
• Professional development opportunities and certifications
• Flexible work schedule and semi-remote work options
• Collaborative and innovative work environment