Cybersecurity Governance, Risk & Operations Lead

sirar by stc; Riyadh; On-site; SAR 450,000 - 650,000; Full time

Job summary

sirar by stc, Advanced technology and cybersecurity company in Saudi Arabia, is seeking an experienced cybersecurity leader to steer initiatives that strengthen the organization's security posture. You will oversee governance, risk and compliance activities, and drive cybersecurity programs across people, processes, and technology.

Responsibilities include managing SOC operations, vulnerability management, incident response, and security program delivery, while ensuring alignment with regulatory

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
• Industry recognized security certifications such as CCNP Security, CCIE, CISSP (or equivalent) preferred.
• Operating systems certifications such as MCSE and RHCSA is preferred.
• A minimum of 7 years in relevant experience.

Responsibilities

• Lead and manage cybersecurity initiatives to strengthen the organization's overall security posture.
• Oversee cybersecurity governance, risk management, and compliance activities, ensuring alignment with regulatory and business requirements.
• Develop and maintain cybersecurity frameworks, policies, standards, procedures, and operating models.
• Ensure achievement and continuous compliance with National Cybersecurity Authority (NCA) requirements.
• Manage and optimize cybersecurity technologies and security platforms to maximize effectiveness and operational efficiency.
• Oversee Security Operations Center (SOC) activities, including 24/7 monitoring, threat detection, incident response, and security operations.
• Direct vulnerability management, remediation, patch management, and cyber defense activities across the organization.
• Lead cybersecurity incident management and coordinate response efforts to minimize business impact.
• Drive continuous cybersecurity maturity improvement through assessments, strategic initiatives, and best practice implementation.
• Provide cybersecurity advisory and strategic support to IT and business stakeholders to achieve security and compliance objectives.
• Manage cybersecurity projects and ensure successful delivery within scope, budget, and timelines.
• Develop cybersecurity metrics, dashboards, and executive reports to measure performance and support decision-making.
• Coordinate protection and defense activities, ensuring timely resolution of identified risks and vulnerabilities.
• Enhance organizational security readiness through proactive monitoring, threat management, and resilience initiatives.
• Ensure effective collaboration among internal teams, external vendors, and stakeholders to support cybersecurity objectives.
• Deliver all assigned cybersecurity programs, projects, and operational activities to maintain a secure and resilient environment.

Skills

Change Management

Fault Management

ITIL Processes

Technical Documentation

Client Onboarding and Technical

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline

Tools

CCNP Security

CCIE

CISSP

MCSE

RHCSA

Job description

Advanced technology and cybersecurity company (sirar) established by stc, the region’s ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments.

As experts in business security and privacy, we offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

• Lead and manage cybersecurity initiatives to strengthen the organization's overall security posture.
• Oversee cybersecurity governance, risk management, and compliance activities, ensuring alignment with regulatory and business requirements.
• Develop and maintain cybersecurity frameworks, policies, standards, procedures, and operating models.
• Ensure achievement and continuous compliance with National Cybersecurity Authority (NCA) requirements.
• Manage and optimize cybersecurity technologies and security platforms to maximize effectiveness and operational efficiency.
• Oversee Security Operations Center (SOC) activities, including 24/7 monitoring, threat detection, incident response, and security operations.
• Direct vulnerability management, remediation, patch management, and cyber defense activities across the organization.
• Lead cybersecurity incident management and coordinate response efforts to minimize business impact.
• Drive continuous cybersecurity maturity improvement through assessments, strategic initiatives, and best practice implementation.
• Provide cybersecurity advisory and strategic support to IT and business stakeholders to achieve security and compliance objectives.
• Manage cybersecurity projects and ensure successful delivery within scope, budget, and timelines.
• Develop cybersecurity metrics, dashboards, and executive reports to measure performance and support decision-making.
• Coordinate protection and defense activities, ensuring timely resolution of identified risks and vulnerabilities.
• Enhance organizational security readiness through proactive monitoring, threat management, and resilience initiatives.
• Ensure effective collaboration among internal teams, external vendors, and stakeholders to support cybersecurity objectives.
• Deliver all assigned cybersecurity programs, projects, and operational activities to maintain a secure and resilient environment.

Academic Qualification:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

Professional Certificate:

• Industry recognized security certifications such as CCNP Security, CCIE, CISSP or equivalent related certifications are preferred.
• Technology/Vendor based certifications are preferred.
• Operating systems certifications such as MCSE and RHCSA is preferred.

Years of Experience:

• A minimum of 7 years in relevant experience.

Skills:

• Change Management
• Fault Management
• ITIL Processes
• Technical Documentation
• Client Onboarding and Technical Consultation

Important Notice for Candidates:

By submitting your application, you confirm that you have read and understood sirar's Candidate Privacy Notice and agree to the processing of your personal data in accordance with it.