Cybersecurity and Compliance Executive

Informa Group Plc.; Riyadh; On-site; SAR 250,000 - 420,000; Full time

Job summary

Tahaluf, a leading Saudi event organizer, seeks a Cybersecurity & Compliance Executive to translate PDPL, NCA, and SAMA CSF into practical policies. You will partner with Tech teams to embed security controls and ensure every event and system launch meets data protection standards.

You will coordinate with Legal, manage risk and reporting, and drive awareness across employees and event staff while supporting audits and regulatory adherence.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 3–5 years in cybersecurity with 2+ years in Saudi regulatory environment.
• Deep knowledge of SAMA CSF, NCA controls, PDPL, and KSA data-privacy laws.
• Strong coordination and multitasking abilities under tight deadlines.
• Experience with event tech platforms is a plus.

Responsibilities

• Translate KSA-specific regulations (NCA, SAMA, PDPL) into actionable policies.
• Lead PDPL data-privacy readiness and coordinate approvals with Legal.
• Prepare security reports and maintain audit trails for audits and regulatory controls.
• Oversee vulnerability assessments and remediation tracking with platform owners.
• Coordinate breach investigations and develop incident response plans.
• Advise on secure network, cloud, and identity architectures; cost controls.

Skills

Regulatory compliance

Cybersecurity

PDPL knowledge

SAMA CSF knowledge

Project coordination

Communication skills

Event tech platforms knowledge

Education

Bachelor's degree in Information Security, Computer Science, or related discipline

Job description

As our Cybersecurity amp Compliance Executive you ll translate KSA-specific regulations NCA SAMA PDPL into actionable policies partner with Tech teams to embed security controls and ensure every event and system launch meets the highest standards of data protection risk management and regulatory adherence

Key Responsibilities

Regulatory Compliance

Lead PDPL data-privacy readiness coordinate with Legal for approvals Help maintain documentation for PDPL SAMA CSF and NCA control checklists Manage compliance with SAMA Cybersecurity Framework NCA controls and CITC guidelines Prepare and share required security reports for each event with the Saudi National Cybersecurity Authority NCA Maintain audit trails and evidence packs to demonstrate compliance with internal and external audits NCA and other regulatory controls

Vulnerability and Risk Management

Run scheduled vulnerability assessments across all digital platforms web mobile API Work closely with platform owners development and ops teams to prioritize track and verify remediation of identified findings

Security Operations & Incident Response

Oversee daily Security Information and Event Management monitoring triage alerts and threat intelligence feeds Develop test and execute Incident Response Plans IRP and run tabletop exercises Coordinate breach investigations and post-incident reports

Technical Architecture & Controls

Advise on secure network cloud AWS Azure and identity architectures Specify deploy and tune security tools firewalls IDS IPS DLP EDR vulnerability scanners

Policy & Process Maintenance

Create and Update necessary policy documents and Standard Operating Procedures

Vendor & Tool Coordination

Liaise with platform and tool providers to schedule maintenance windows or updates Verify delivery of agreed security reporting e g monthly vulnerability reports

Training & Awareness

Build and deliver security awareness and phishing-simulation programs for all employees and event staff Measure program effectiveness and iterate to drive cultural lift

Reporting Management

Produce monthly dashboards on security posture compliance status and incident metrics for leadership Liaise with internal teams Tech Legal Operations and external vendors to ensure consistent security integration

Company Description

Tahaluf is the largest B2B live and on-demand events organiser in Saudi Arabia by space attendance colleagues and revenue It is a joint venture between Informa PLC the Saudi Federation for Cybersecurity Programming and Drones SAFCSP and the Events Investment Fund EIF Tahaluf is bold visionary and determined to make an impact Our team fosters a culture of collaboration creativity and a little fun here teamwork rules and work feels as exciting as the events we create Scaling at this pace also requires exceptional local partners and Tahaluf is proud to work with a range of government and non-government organisations at the forefront of Saudi Arabia s B2B and B2C large-scale events scene Be part of something BIG with Tahaluf s series of record-breaking events LEAP and Cityscape - the largest events in the world in their respective fields of tech and real estate Black Hat MEA - a Guinness World Record holder for the largest CTF competition during the event and CPHI Middle East - the largest pharma debut event in history to name just a few Tahaluf is making a huge impact on the global events sector Join our ambitious and highly committed team unafraid to push boundaries and disrupt the status quo From day one you ll dive into large-scale projects under the guidance of a supportive leadership team that will encourage your personal development and open doors to new opportunities

Qualifications

Bachelor s degree in Information Security Computer Science or related discipline strong Experience strong 3-5 years of experience in cybersecurity roles with a minimum of 2 years of closely operating within the Saudi regulatory environment Deep knowledge of SAMA CSF NCA controls PDPL requirements and KSA data-privacy laws Basic project coordination skills and the ability to manage multiple tasks while maintaining attention to detail Comfortable adapting to a fast-paced environment and adjusting to changing priorities Good communication and interpersonal skills able to work effectively with cross-functional teams Familiarity with project management tools and experience with event tech platforms is a plus Experience working in the events and or media industry is a plus Bachelor s degree in Information Security, Computer Science, or related discipline. Experience 3-5 years of experience in cybersecurity roles, with a minimum of 2 years of closely operating within the Saudi regulatory environment.Deep knowledge of SAMA CSF, NCA controls, PDPL requirements, and KSA data-privacy laws.Basic project coordination skills and the ability to manage multiple tasks while maintaining attention to detail.Comfortable adapting to a fast-paced environment and adjusting to changing priorities.Good communication and interpersonal skills, able to work effectively with cross-functional teams.Familiarity with project management tools and experience with event tech platforms is a plus.Experience working in the events and/or media industry is a plus.