Cybersecurity Architect

Lendo; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading financial technology firm in Riyadh is seeking a Cybersecurity Architect to design and implement security frameworks and ensure systems are secure by design. The role involves collaborating with engineering and compliance teams, conducting risk assessments, and guiding the integration of security tools. Candidates should have a minimum of 5 years in IT/security and fluency in both English and Arabic. Relevant certifications are a plus.

Qualifications

• 5+ years of IT/security experience, with at least 2 years in a dedicated security architecture role.
• Expertise in network, application, cloud, and data security architecture.
• Strong knowledge of identity and access management (IAM), encryption, and endpoint security.

Responsibilities

• Develop and maintain security architecture frameworks.
• Provide security design guidance for infrastructure and applications.
• Conduct technical risk assessments to identify vulnerabilities.

Skills

Cybersecurity architecture

Identity and access management

Risk assessment

Cloud security

Communication

Mentoring

Education

Bachelor’s degree in Computer Science, Cybersecurity, or related field

Master’s degree preferred

Tools

Security Information and Event Management (SIEM)

Endpoint Detection and Response (EDR)

Web Application Firewall (WAF)

Data Loss Prevention (DLP)

Job description

As Lendo continues to scale, we’re looking for a proactive and visionary Cybersecurity Architect to ensure our systems, applications, and infrastructure are secure by design. In this role, you’ll define security architecture frameworks, design and review solutions, and guide the implementation of IAM, PAM, and security tooling across the business.

You’ll collaborate closely with engineering, product, and compliance teams to embed secure-by-design principles into every layer of our technology. By conducting risk assessments, shaping policies, and aligning with regulatory requirements, you’ll help safeguard our operations while enabling innovation.

Key Requirements

• Develop and maintain security architecture frameworks, ensuring alignment with business objectives and regulatory requirements.

• Provide security design guidance for infrastructure, applications, and cloud deployments.

• Define and enforce secure design principles, standards, and patterns across IT and development lifecycles.

• Conduct technical risk assessments and threat modeling to identify potential vulnerabilities and recommend mitigation strategies.

• Assess and recommend security tools and technologies, ensuring scalability and resilience.

• Partner with IT, developers, DevOps, and business units to embed security into projects from the ground up.

• Provide architectural guidance during incident response, forensic investigations, and lessons-learned exercises.

• Ensure designs adhere to frameworks and standards (e.g., NIST CSF, ISO 27001).

• Stay current with evolving threats, emerging technologies, and industry best practices to strengthen enterprise security.

• Define and oversee identity, access, and privilege management strategies, ensuring strong authentication, role-based access, and least-privilege principles.

• Design and guide configuration of key security technologies (SIEM, EDR, firewalls, WAF, DLP, CASB, etc.) to ensure they are integrated and optimized.

• Review architectural changes (e.g., new integrations, design changes, core network modifications, security tooling updates).

• Guide and mentor security engineers, analysts, and developers in secure design best practices.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (Master’s preferred).

• 5+ years of IT/security experience, with at least 2 years in a dedicated security architecture role.

• Expertise in network, application, cloud, and data security architecture.

• Strong knowledge of identity and access management (IAM), encryption, key management, and endpoint security.

• Familiarity with DevSecOps practices and secure CI/CD pipeline integration.

• Hands-on experience with security solutions (firewalls, SIEM, EDR, WAF, DLP, etc.).

• Understanding compliance and regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS, SOX).

• Relevant certifications are strongly preferred: CISSP, CCSP, CISM, or cloud security certifications

• Fluency in both English and Arabic (written and verbal), with the ability to communicate effectively with technical teams and executive leadership.