Cyber Risk Lead — Remote/Hybrid, Growth & Equity

HALA; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading fintech company in Saudi Arabia is seeking a Cybersecurity Risk Lead to develop and govern risk management methodologies. You will lead the cyber risk management program, define risk appetite, oversee third-party risks, and ensure compliance with regulatory frameworks. The ideal candidate has at least 8 years of experience in cyber GRC/risk, particularly within the financial sector, and holds relevant certifications. This role offers competitive compensation, personal development opportunities, and a flexible working environment.

Benefits

Inclusive and diverse culture

Competitive compensation

Personal development and training

Flexible working setups

Qualifications

• 8–12+ years in cyber GRC/risk, preferably in the financial sector.
• Strong knowledge of risk frameworks and mapping to controls.
• Certifications such as CISSP-ISSMP, CISM, or CRISC are a plus.

Responsibilities

• Develop and govern risk management methodology for cybersecurity.
• Lead cyber risk management program aligned to SAMA/NCA.
• Oversee third-party cyber risk for vendors and partners.

Skills

Risk management

Cybersecurity frameworks (ISO 27001, NIST CSF)

Audit skills

Stakeholder engagement

Education

Bachelor’s in Cybersecurity, IT, Business, or related field

Job description

A leading fintech company in Saudi Arabia is seeking a Cybersecurity Risk Lead to develop and govern risk management methodologies. You will lead the cyber risk management program, define risk appetite, oversee third-party risks, and ensure compliance with regulatory frameworks. The ideal candidate has at least 8 years of experience in cyber GRC/risk, particularly within the financial sector, and holds relevant certifications. This role offers competitive compensation, personal development opportunities, and a flexible working environment.