CISO - IT/OT Cybersecurity Strategy & Risk Leadership

SASREF; Saudi Arabia; On-site; SAR 400,000 - 600,000; Full time

Job summary

A leading energy company in Saudi Arabia seeks a seasoned cybersecurity expert to develop and implement its IT and operational technology strategies. The role involves ensuring compliance with cybersecurity regulations and leading governance, risk, and compliance programs. Candidates must have relevant degrees, necessary certifications, and extensive experience in cybersecurity and team leadership. The position emphasizes incident response and continuous improvement in security measures while promoting cybersecurity awareness across the organization.

Benefits

Competitive compensation package

Career development opportunities

Health and wellness programs

Qualifications

• Bachelor's in Computer Science, Cybersecurity or related field required.
• CISSP and CISM certifications are mandatory.
• Minimum 10 years of experience in Cybersecurity/IT required.

Responsibilities

• Develop and implement cybersecurity strategy to protect against threats.
• Oversee cybersecurity governance, risks, and compliance.
• Conduct gap assessments and monitor cybersecurity maturity.
• Manage incident responses and compliance with regulations.

Skills

Cybersecurity strategy development

Risk management

Governance, Risk, and Compliance

Communication with regulatory bodies

Incident response

Team leadership

Education

Bachelor’s Degree in Computer Science, Cybersecurity

Master’s Degree (preferred)

CISSP certification

CISM certification

Job description

A leading energy company in Saudi Arabia seeks a seasoned cybersecurity expert to develop and implement its IT and operational technology strategies. The role involves ensuring compliance with cybersecurity regulations and leading governance, risk, and compliance programs. Candidates must have relevant degrees, necessary certifications, and extensive experience in cybersecurity and team leadership. The position emphasizes incident response and continuous improvement in security measures while promoting cybersecurity awareness across the organization.