Cybersecurity and Compliance Executive - 6 month Maternity Cover

Informa Group Plc.; Riyadh Region; On-site; SAR 180,000 - 260,000; Full time

Job summary

Tahaluf is recruiting a Cybersecurity & Compliance Executive to translate KSA regulations into actionable security policies, embed controls with tech teams, and ensure event and system launches meet data protection standards.

The role covers vulnerability management, security operations, incident response, and governance across cloud and on-premises environments. This is a 6-month maternity-cover contract based in Saudi Arabia.

Qualifications

• 3-5 years of cybersecurity experience with at least 2 years in a Saudi regulatory environment.
• Deep knowledge of SAMA CSF, NCA controls, PDPL requirements, and KSA data-privacy laws.

Responsibilities

• Lead PDPL data-privacy readiness and coordinate with Legal for approvals.
• Maintain documentation for PDPL, SAMA CSF, NCA control checklists, and CITC guidelines.
• Prepare and share security reports for events with the NCA.
• Oversee daily security operations including SIEM monitoring and incident response planning.
• Develop and test incident response plans and run tabletop exercises.
• Advise on secure network, cloud, and identity architectures.

Skills

Regulatory compliance

Vulnerability risk management

Security operations

Incident response

Cloud security (AWS/Azure)

Education

Bachelor's degree in Information Security or Computer Science

Tools

Firewalls

IDS/IPS

DLP

EDR

Vulnerability scanners

Job description

Cybersecurity and Compliance Executive - 6 month Maternity Cover

• Contract

Tahaluf is the largest B2B live and on-demand events organiser in Saudi Arabia by space, attendance, colleagues, and revenue. It is a joint venture between Informa PLC, the Saudi Federation for Cybersecurity, Programming and Drones (SAFCSP), and the Events Investment Fund (EIF).
Tahaluf is bold, visionary, and determined to make an impact. Our team fosters a culture of collaboration, creativity, and a little fun, here teamwork rules and work feels as exciting as the events we create. Scaling at this pace also requires exceptional local partners, and Tahaluf is proud to work with a range of government and non-government organisations at the forefront of Saudi Arabia’s B2B and B2C large-scale events scene.
Be part of something BIG with Tahaluf’s series of record-breaking events: LEAP and Cityscape - the largest events in the world in their respective fields of tech and real estate; Black Hat MEA - a Guinness World Record holder for the largest CTF competition during the event; and CPHI Middle East - the largest pharma debut event in history, to name just a few. Tahaluf is making a huge impact on the global events sector.
Join our ambitious and highly committed team, unafraid to push boundaries and disrupt the status quo. From day one, you’ll dive into large-scale projects under the guidance of a supportive leadership team that will encourage your personal development and open doors to new opportunities.

As our Cybersecurity & Compliance Executive, you’ll translate KSA-specific regulations (NCA, SAMA, PDPL) into actionable policies, partner with Tech teams to embed security controls and ensure every event and system launch meets the highest standards of data protection, risk management, and regulatory adherence.

Key Responsibilities

Regulatory Compliance

• Lead PDPL data-privacy readiness; coordinate with Legal for approvals.
• Help maintain documentation for PDPL, SAMA CSF, and NCA control checklists.
• Manage compliance with SAMA Cybersecurity Framework, NCA controls, and CITC guidelines.
• Prepare and share required security reports for each event with the Saudi National Cybersecurity Authority (NCA).
• Maintain audit trails and evidence packs to demonstrate compliance with internal and external audits, NCA and other regulatory controls.

Vulnerability and Risk Management

• Run scheduled vulnerability assessments across all digital platforms (web, mobile, API).
• Work closely with platform owners, development, and ops teams to prioritize, track, and verify remediation of identified findings.

Security Operations & Incident Response

• Oversee daily Security Information and Event Management monitoring, triage alerts, and threat intelligence feeds.
• Develop, test, and execute Incident Response Plans (IRP) and run tabletop exercises.
• Coordinate breach investigations and post-incident reports.

Technical Architecture & Controls

• Advise on secure network, cloud (AWS/Azure), and identity architectures.
• Specify, deploy, and tune security tools: firewalls, IDS/IPS, DLP, EDR, vulnerability scanners.

Policy & Process Maintenance

• Create and Update necessary policy documents and Standard Operating Procedures.
• Liaise with platform and tool providers to schedule maintenance windows or updates.
• Verify delivery of agreed security reporting (e.g., monthly vulnerability reports).
• Build and deliver security awareness and phishing-simulation programs for all employees and event staff.
• Measure program effectiveness and iterate to drive cultural lift.

Reporting Management

• Produce monthly dashboards on security posture, compliance status, and incident metrics for leadership.
• Liaise with internal teams (Tech, Legal, Operations) and external vendors to ensure consistent security integration.

• Bachelor’s degree in Information Security, Computer Science, or related discipline.

Experience

• 3-5 years of experience in cybersecurity roles, with a minimum of 2 years of closely operating within the Saudi regulatory environment.
• Deep knowledge of SAMA CSF, NCA controls, PDPL requirements, and KSA data-privacy laws.
• Basic project coordination skills and the ability to manage multiple tasks while maintaining attention to detail.
• Comfortable adapting to a fast-paced environment and adjusting to changing priorities.
• Good communication and interpersonal skills, able to work effectively with cross-functional teams.
• Familiarity with project management tools and experience with event tech platforms is a plus.
• Experience working in the events and/or media industry is a plus.

Please note this is a temporary, 6 month role, with an ideal start date at the end of October.

We don't just accept difference, we celebrate it. We welcome applicants from all backgrounds and circumstances and base hiring decisions on relevant qualifications and merit. We are proud to provide a disability-friendly environment. If you require any support or adjustments to participate in our interview or selection processes, please let us know.