Cybersecurity Governance, Risk & Operations Lead

sirar by stc; Saudi Arabia; On-site; SAR 250,000 - 380,000; Full time

Job summary

sirar by stc is seeking a seasoned cybersecurity leader to drive governance, risk and incident response across the organization. You will oversee SOC operations, vulnerability management, and security programs to strengthen the security posture.

The role requires a Bachelor’s degree in Cybersecurity or related field, multiple security certifications, and a minimum of 7 years in security leadership. You will partner with IT and business to deliver secure, compliant outcomes for the region.

Qualifications

• Bachelor's degree in cybersecurity or a related field.
• 7+ years of relevant cybersecurity experience.
• Industry security certifications preferred (CCNP Security, CCIE, CISSP).

Responsibilities

• Lead cybersecurity initiatives to strengthen the organization's security posture.
• Oversee cybersecurity governance, risk management, and compliance activities.
• Develop and maintain cybersecurity frameworks, policies, and procedures.

Skills

Change Management

Fault Management

ITIL Processes

Technical Documentation

Vendor Management

Client Onboarding

Education

Bachelor's degree in Cybersecurity/related field

Job description

Company Overview:

Advanced technology and cybersecurity company (sirar) established by stc, the region's ICT and digital services provider, sirar by stc is a cutting-edge cybersecurity provider that empowers organization to take control of their cyber capabilities and digital environments.

As experts in business security and privacy, we offer a comprehensive range of solutions that help you to operate online safely, securely, and efficiently. The tools we provide help organizations detect and prevent cybersecurity attacks, safeguard their digital future, and provide protection and security from that point forward.

Roles & Responsibilities:

• Lead and manage cybersecurity initiatives to strengthen the organization's overall security posture.
• Oversee cybersecurity governance, risk management, and compliance activities, ensuring alignment with regulatory and business requirements.
• Develop and maintain cybersecurity frameworks, policies, standards, procedures, and operating models.
• Ensure achievement and continuous compliance with National Cybersecurity Authority (NCA) requirements.
• Manage and optimize cybersecurity technologies and security platforms to maximize effectiveness and operational efficiency.
• Oversee Security Operations Center (SOC) activities, including 24/7 monitoring, threat detection, incident response, and security operations.
• Direct vulnerability management, remediation, patch management, and cyber defense activities across the organization.
• Lead cybersecurity incident management and coordinate response efforts to minimize business impact.
• Drive continuous cybersecurity maturity improvement through assessments, strategic initiatives, and best practice implementation.
• Provide cybersecurity advisory and strategic support to IT and business stakeholders to achieve security and compliance objectives.
• Manage cybersecurity projects and ensure successful delivery within scope, budget, and timelines.
• Develop cybersecurity metrics, dashboards, and executive reports to measure performance and support decision-making.
• Coordinate protection and defense activities, ensuring timely resolution of identified risks and vulnerabilities.
• Enhance organizational security readiness through proactive monitoring, threat management, and resilience initiatives.
• Ensure effective collaboration among internal teams, external vendors, and stakeholders to support cybersecurity objectives.
• Deliver all assigned cybersecurity programs, projects, and operational activities to maintain a secure and resilient environment.

Academic Qualification:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

Professional Certificate:

• Industry recognized security certifications such as CCNP Security, CCIE, CISSP or equivalent related certifications are preferred.
• Technology/Vendor based certifications are preferred.
• Operating systems certifications such as MCSE and RHCSA is preferred.

Years of Experience:

• A minimum of 7 years in relevant experience.

Skills:

• Change Management
• Fault Management
• ITIL Processes
• Technical Documentation
• Vendor Management
• Client Onboarding and Technical Consultation

Important Notice for Candidates:

By submitting your application, you confirm that you have read and understood sirar's Candidate Privacy Notice and agree to the processing of your personal data in accordance with it.