Cybersecurity & DMO Director

Riyadh University of Arts جامعة الرياض للفنون; Riyadh; On-site; SAR 420,000 - 600,000; Full time

Job summary

Riyadh University of Arts (RUA) is seeking a senior cybersecurity and data governance leader to define and govern strategy, policies, and controls to protect digital assets and strengthen resilience across the institution.

You will align cybersecurity and data priorities with university objectives, oversee governance for cyber and data management, and collaborate with Digital & Technology, Risk & BCM, and academic leaders.

Qualifications

• 8+ years of progressive experience in cybersecurity, information security, technology risk, or a related field.
• At least 4 years in a managerial or leadership role.
• Experience defining security strategy, governance, and architecture in a complex environment.
• Experience with incident response, third‑party cyber risk, and IAM oversight.

Responsibilities

• Lead the development and execution of the university's cybersecurity strategy, aligning priorities, investment, and risk posture with institutional objectives.
• Establish governance structures, decision rights, and accountability forums to direct cybersecurity risk management and compliance.
• Direct performance reporting on security posture, risk trends, and control effectiveness to support executive decision making.
• Oversee the enterprise data governance framework in alignment with regulatory requirements.
• Coordinate with internal and external stakeholders to integrate cybersecurity priorities into business planning and remediation efforts.

Skills

Cybersecurity strategy

Governance

Incident response

IAM oversight

Risk management

Leadership

Education

Bachelor degree in cybersecurity

Master degree in cybersecurity (preferred)

Job description

RUA is a forward-thinking institution for cross-cultural arts education and creative innovation in the Middle East that fosters bold ideas that inspire progress and transform society by cultivating industry and academic collaboration and rethinking creative education, all while creating a space for global ideas to flourish in a culturally inspiring environment.

• Our Vision
• To be an inspiring beacon of knowledge for future generations, integrating culture and arts, empowering students to discover passions and develop talents while fostering creativity and cultural exchange.
• Our Mission
• To cultivate an innovative educational environment in culture and arts, delivering cutting-edge programs that foster cultural and artistic engagement, enriching both the Saudi and global communities.
• Our Aspirations
• The leading cultural university across the Middle East and North Africa.
• Ranked among top 50 universities worldwide specializing in cultural education.
• A global hub for cultural education and knowledge exchange.

Job Summary

Leads the university's cybersecurity and data governance function by defining and governing cybersecurity strategy, policies, controls, architecture, monitoring, incident response, and data governance to protect digital assets, manage cyber risk, and strengthen resilience. The role aligns cybersecurity and data priorities with institutional objectives, oversees governance frameworks for cyber and data management, and ensures compliance with NCA, NDMO and relevant Saudi cybersecurity and data governance frameworks. The role partners with D&T on technical implementation and remediation, and with Risk & BCM on enterprise risk and business continuity governance while fostering a security-aware, data-conscious culture across the university.

General Accountabilities

Strategy and Planning

• Oversee the design and implementation of Cybersecurity & DMO department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy.
• Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives.
• Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives.

Budget Management

• Participate in Legal & GRC's budgeting process and provide input from Cybersecurity & DMO standpoint.
• Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered.

Policies, Processes, and Procedures

• Oversee the design and set up of Cybersecurity & DMO department’s policies, processes and procedures to align with and exceed best-in class standards.
• Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function.
• Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed.

People Management

• Inspire the team and provide guidance, delegation and mentorship to create a performance-driven culture.
• Ensure availability and qualification of team through recruitment, training, development and performance management.
• Take actions to enhance employee engagement and motivation.
• Provide clear top-down communication to employees and bottom-up feedback to senior management.

Job Specific Accountabilities

Cybersecurity Strategy, Governance, and Compliance

• Lead the development and execution of the university's cybersecurity strategy, aligning priorities, investment, and risk posture with institutional objectives.
• Establish governance structures, decision rights, and accountability forums to direct cybersecurity risk management and compliance.
• Direct performance reporting on security posture, risk trends, and control effectiveness to support executive decision making.

Cyber Risk, Third-Party Risk, and Secure-by-Design

• Drive enterprise cyber risk assessment and treatment planning, ensuring material risks are owned, mitigated, and escalated appropriately.
• Oversee establishment of requirements for third-party cybersecurity due diligence, contracting safeguards, and remediation oversight.
• Ensure secure-by-design principles into projects, changes, and solution reviews are embdeeded so security requirements are addressed before implementation.
• Coordinate with academic and administrative leaders to integrate cybersecurity priorities into business planning and operational decisions.

Architecture, Identity, and Technical Control Oversight

• Guide the evolution of the enterprise security architecture to strengthen resilience, standardization, and control effectiveness.
• Direct identity access management (IAM) governance, including access standards, privileged access, authentication, and lifecycle controls.
• Partner with Digital & Technology to align security design, remediation priorities, and hardening actions
• Approve control expectations and review effectiveness across critical platforms, services, and data environments.

Threat Intelligence, Monitoring, and Incident Response

• Lead the threat intelligence program to anticipate emerging risks and shape proactive defense measures.
• Set the direction for security monitoring, alert escalation, and response readiness across the university.
• Direct major incident response, including containment, recovery, forensic coordination, and executive reporting.
• Ensure crisis communication, regulatory notification, and lessons learned processes are tested and continuously improved.

Data Management and Governance

• Oversee the university-wide data governance framework in alignment with NDMO requirements.
• Establish data ownership, decision rights, policies, and standards to enable trusted, compliant, and effective data use.
• Direct data lifecycle governance across classification, access, retention, sharing, and disposal.
• Champion data quality, privacy, and accountability practices that improve data maturity and value realization.

Knowledge & Experience

• 8+ years of progressive experience in cybersecurity, information security, technology risk, or a related field, including at least 4 years in a managerial or leadership role
• Demonstrated experience defining security strategy, governance, architecture oversight, incident response, third-party cyber risk, IAM oversight, and regulatory compliance in a complex environment

Education & Certifications

• Bachelor degree in cybersecurity, information security, computer science, information systems, or related discipline is required
• Master degree in cybersecurity, information security, information systems, computer science, business administration, or a related field is preferred
• Professional certifications within cybersecurity fields are prefer.

Internal Stakeholders

• Compliance
• Governance
• Internal Audit
• Procurement

External Stakeholders

• National Cybersecurity Authority (NCA)
• National Data Management Office (NDMO)
• External Auditors and Independent Assessors
• Managed Security Service Providers and Technology Vendors
• Incident Response, Forensics, and Penetration Testing Specialists

RUA represents a platform for discovery, a space where talent is nurtured, and a gateway for Saudi art and culture to the world. We welcome you to join us on this exceptional journey. Together, we will shape the ambitious cultural future of the Kingdom and inspire the world.

As the first of its kind in the MENA region, RUA serves as a center of creativity, knowledge, and innovation, contributing to shaping the future of Saudi Arabia’s cultural ecosystem and creative economy, driving the growth of Saudi Arabia’s cultural sector in alignment with Saudi Vision 2030.