Cyber Security Consultant | KBCTest Technologies | Saudi Arabia

KBCTest Technologies; Saudi Arabia; On-site; SAR 240,000 - 420,000; Full time

Job summary

KBCTest Technologies is seeking an experienced Cyber Security Consultant with deep bank‑ing domain expertise and hands‑on SAMA CSF knowledge in Saudi Arabia. You will lead SAMA CSF assessments, policy development, and regulatory reporting while coordinating with senior management to remediate gaps and strengthen cyber risk posture.

Ideal candidates have 5–8+ years in GRC within banking/fintech, strong stakeholder communication, and legal eligibility to work on-site in Saudi Arabia.

Qualifications

• Bachelor’s degree in CS, cybersecurity, IT, or related field.
• 5–8+ years in cybersecurity, with GRC focus.
• Hands-on knowledge of SAMA CSF.
• Experience in banking/fintech in KSA or GCC.
• Experience in security assessments, gap analyses, risk remediation.
• Knowledge of regulatory reporting standards.
• Strong communication and executive presentation skills.
• Legally eligible to work on-site in Saudi Arabia.

Responsibilities

• Conduct SAMA CSF assessments, gap analyses, control implementations, and remediation tracking.
• Develop cybersecurity policies, procedures, standards, and regulatory reporting frameworks.
• Spearhead GRC initiatives within banking environments.
• Collaborate with business units, IT, cybersecurity, and senior management.
• Provide advisory support on Saudi/GCC banking regulatory mandates.
• Evaluate controls against regulatory baselines to identify vulnerabilities and mitigations.
• Facilitate audits, compliance reviews, and executive risk reporting.
• Coordinate cross-functional remediation to resolve findings.

Skills

GRC expertise

SAMA CSF

Banking domain

Regulatory reporting

Stakeholder management

Executive presentation

On-site work eligibility

Education

Bachelor's degree

Tools

SAMA CSF tooling

Audit tools

Job description

Position Summary

KBCTest Technologies is actively seeking an experienced, analytical, and specialized Cyber Security Consultant with deep banking domain expertise and hands‑on SAMA CSF knowledge to join our client operations in Saudi Arabia on a full‑time permanent basis. In this critical Governance, Risk, and Compliance (GRC) advisory role, you will be responsible for conducting SAMA cybersecurity assessments, performing comprehensive gap analyses, implementing security controls, and driving remediation programs for tier‑1 financial institutions. You will leverage your deep practical understanding of regulatory compliance frameworks, banking security operations, and stakeholder coordination to ensure uncompromised cybersecurity postures. This opportunity strictly requires candidates who are locally available in Saudi Arabia with relevant banking sector experience.

Detailed Job Description

As a Cyber Security Consultant supporting financial institutions in Saudi Arabia via KBCTest Technologies, you will take full operational and advisory ownership of cybersecurity GRC programs, regulatory alignment, and framework implementation. Your day‑to‑day responsibilities include executing SAMA CSF assessments, developing robust cybersecurity policies, procedures, and control frameworks, and preparing executive regulatory reports. You will work closely with business units, IT teams, cybersecurity personnel, and senior management stakeholders to coordinate risk remediation, bridge security gaps, and ensure total compliance with regional financial authorities. Furthermore, you will lead control implementation reviews and advise financial leadership on emerging cyber threats and mitigation strategies.

Key Responsibilities

• Conduct comprehensive SAMA CSF assessments, security gap analyses, control implementations, and remediation tracking.
• Design, develop, and update enterprise cybersecurity policies, procedures, standards, and regulatory reporting frameworks.
• Spearhead Governance, Risk, and Compliance (GRC) initiatives within banking and financial institutional environments.
• Collaborate effectively with business units, IT infrastructure, cybersecurity, and senior management stakeholders.
• Provide expert advisory support on Saudi Arabian and GCC banking regulatory compliance mandates.
• Evaluate existing IT and security controls against regulatory baselines to identify vulnerabilities and recommend mitigations.
• Facilitate audits, compliance reviews, and executive management reporting on cybersecurity risk posture.
• Coordinate cross‑functional remediation efforts to resolve audit findings and security control deficiencies.

Required Qualifications & Skills

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
• Minimum of 5 to 8+ years of professional cybersecurity experience with a strong focus on Governance, Risk, and Compliance (GRC).
• Mandatory hands‑on experience and deep technical knowledge of the Saudi Central Bank Cybersecurity Framework (SAMA CSF).
• Proven professional background working within the banking, financial services, or fintech domain in Saudi Arabia or the GCC region.
• Demonstrated expertise conducting security assessments, gap analyses, control design, and risk remediation.
• Strong understanding of cybersecurity policies, risk management frameworks, and regulatory reporting standards.
• Exceptional interpersonal communication, stakeholder management, and executive presentation capabilities.
• Mandatory local availability in Saudi Arabia with legal eligibility to work on‑site.

Nice‑to‑Have Skills

• Advanced postgraduate degrees in Information Security, Cybersecurity, or Business Administration.
• Industry‑recognized professional certifications such as CISSP, CISA, CISM, CRISC, or ISO 27001 Lead Auditor.
• Prior professional experience working directly with Big‑4 advisory firms or specialized financial cybersecurity consultancies.
• Comprehensive knowledge of other regional regulatory standards (e.g., NCA ECC, Aramco SACS, SWIFT CSP).
• Strong technical background in security architecture, vulnerability management, and audit coordination.

Application Information

• Salary/Rate: Market Competitive / Enterprise Banking Package
• Deadline: Open until filled
• Notice Period: Immediate to 30 Days
• Contract Duration: Permanent / Full‑Time On‑Site (Saudi Arabia)