Cybersecurity & Data Protection Manager

MyFatoorah; Riyadh Region; On-site; SAR 260,000 - 460,000; Full time

Job summary

MyFatoorah is seeking a Cybersecurity & Data Protection Manager to lead and strengthen our security posture, privacy program, and regulatory compliance. This role works closely with senior management and regulatory stakeholders to shape strategy and governance.

The position requires 6–10 years in cybersecurity with leadership experience, plus hands-on knowledge of ISO 27001, NIST, NCA and PDPL. Bachelor’s degree is required; certifications such as CISSP or CISM are strong plus.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 6–10 years of experience in cybersecurity with supervisory or leadership exposure.
• Strong knowledge of ISO 27001, NIST, and NCA cybersecurity standards.
• Hands-on experience with data protection and PDPL compliance.
• Professional certifications such as CISSP, CISM, or ISO 27001 are a strong plus.
• Strong leadership, communication, and stakeholder management skills.

Responsibilities

• Lead and manage the company’s cybersecurity and data protection strategy.
• Develop, implement, and maintain cybersecurity and privacy policies and procedures.
• Ensure regulatory compliance with SAMA, NCA, and PDPL.
• Oversee cybersecurity risk management and incident response activities.
• Protect IT infrastructure, systems, and applications.
• Manage security assessments, penetration testing, and audits.
• Prepare and present cybersecurity reports to senior management and governance committees.
• Promote cybersecurity awareness across the organization.

Skills

Leadership

Communication

Stakeholder management

Cybersecurity knowledge

Education

Bachelor's degree in Cybersecurity or related field

Job description

We are looking for a Cybersecurity & Data Protection Manager to lead and strengthen our cybersecurity posture, data protection framework, and regulatory compliance. This role will work closely with senior management and regulatory stakeholders.

Key Responsibilities:

• Lead and manage the company’s cybersecurity and data protection strategy.
• Develop, implement, and maintain cybersecurity and privacy policies and procedures.
• Ensure compliance with regulatory requirements (e.g. SAMA, NCA, PDPL).
• Oversee cybersecurity risk management and incident response activities.
• Protect IT infrastructure, systems, and applications.
• Manage security assessments, penetration testing, and periodic audits.
• Prepare and present cybersecurity reports to senior management and governance committees.
• Promote cybersecurity awareness across the organization.

Qualifications & Requirements:

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 6 to 10 years of experience in cybersecurity, including supervisory or leadership exposure.
• Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, NCA).
• Hands-on experience with data protection and compliance with PDPL.
• Professional certifications are a strong plus (CISSP, CISM, ISO 27001).
• Strong leadership, communication, and stakeholder management skills.