CS Compliance Principle Expert

Confidential Semi-Government; Riyadh; On-site; SAR 150,000 - 200,000; Full time

Job summary

A semi-government organization in Riyadh is seeking a Director to supervise compliance frameworks and conduct audits. This role requires at least 8 years of experience leading cybersecurity functions, especially within the telecom industry. Responsibilities include ensuring regulatory adherence, developing compliance calendars, and providing assurance to management. A Bachelor Degree in Computer Science or Information Technology is mandatory. This full-time position offers a pivotal role in information technology and compliance management.

Qualifications

• Minimum of 8 years of experience in leading Cyber Security function.
• Preferably experience within the telecom industry.

Responsibilities

• Supervise compliance framework updates and audits.
• Ensure local regulation compliance and perform assessments.
• Develop compliance calendar and establish reporting mechanisms.
• Communicate non-compliance findings and provide training needs.

Skills

Compliance framework supervision

Regulatory adherence

Cybersecurity assessments

Risk management

Education

Bachelor Degree in Computer Science or Information Technology

Job description

The role holder is responsible for supervising compliance framework updates, ensuring regulatory adherence, and conducting compliance checks and audits, establish reporting mechanisms, and provide independent assurance to management, develop a compliance calendar. The role holder shall carry out their duties in accordance with the stipulated business policies and procedures.

Job Responsibilities

• Supervise group’s compliance framework updates including key procedures and stakeholders.
• Maintain a list of non‑conformant departments and liaise with them to help them become compliant and escalated when necessary.
• Ensure compliance with local regulation, continuous assessments, evidence collection and maintenance.
• Establish reporting mechanisms to ensure management oversight on compliance‑related matters.
• Lead performing the compliance checks and security audits in company and the group subsidiaries and third parties.
• Ensure providing independent assurance to management via compliance assessments by assessing the target environment and reporting the gaps to relevant cybersecurity and business stakeholders.
• Develop compliance calendar for all compliance initiatives throughout the year in alignment with Group Compliance.
• Ensure alignment with group Compliance function through regular reporting of compliance activities and non‑compliance issues.
• Ensure the non‑compliance findings identified during security audits are treated effectively, compliance requirements are being met, and agreed security controls are implemented within agreed timelines.
• Ensure providing feedback to Governance on compliance framework to ensure it remains as per industry best practices (ISO 27001:2013 etc.).
• Communicate non‑compliance findings based on compliance assessments – covering policy, regulatory, legal findings – to stakeholders & follow up and escalated non‑compliance issues.
• Ensure providing group Compliance Management Department with the compliance related training needs and awareness content and where necessary support with delivery.
• Collaborate with group Compliance to provide required inputs, information, and reports to plan and validate compliance planned assessment initiatives related to the sectors.
• Manage cybersecurity compliance assessments for the group subsidiaries along with definition of CS index baseline and targets to be shared through the CSDG Enablement.
• Ensure proper alignment with CSDG Enablement in regard to any topic require sharing with the group subsidiaries.
• Ensure firewalls are managed & operated securely in alignment with internal & external cybersecurity requirements by conducting periodic compliance checks & integrate firewalls with supported technologies to ensure proper management in place.

Years of Experience

A minimum of 8 years.

Nature of Experience

Related experience in leading the Cyber Security function for a large organization preferably within the telecom industry.

Education

Bachelor Degree in Computer Science or Information Technology.

Seniority Level

Director

Employment Type

Full‑time

Job Function

Information Technology

Industries

Telecommunications and Technology, Information and Media