Cybersecurity Lead

NextEra; Riyadh; Sur place; SAR 350 000 - 700 000; Plein temps

Résumé du poste

NextEra in Riyadh seeks a Cybersecurity Lead to drive the organization’s information security, governance, risk, and compliance agenda in Saudi Arabia. You will act as the SPOC for cybersecurity initiatives, align with regulatory requirements, lead audits, and oversee ISO 27001 and NCA ECC compliance while working with senior leadership and clients.

The role emphasizes building dashboards, executive reporting, and effective stakeholder management to strengthen security posture and ensure

Qualifications

• 9+ years in Information Security, Cybersecurity, GRC or Risk Management.
• 5+ years of leadership experience.
• Experience establishing or leading Information Security/Cybersecurity functions.
• Strong knowledge of Saudi Arabian cybersecurity regulations and compliance requirements.

Responsabilités

• Act as lead for Information Security, Cybersecurity and GRC initiatives in Saudi Arabia.
• Lead implementation and continuous improvement of Cybersecurity, Information Security, and GRC functions.
• Ensure alignment with Saudi regulatory requirements and client security requirements.
• Manage risk assessments, risk acceptance, mitigation, vulnerability management and security assurance activities.
• Lead audits from an Information Security and IT perspective.
• Oversee security certifications and compliance programs including ISO 27001 and NCA ECC.

Connaissances

Cybersecurity leadership

GRC management

Regulatory compliance

Audits & certifications

Stakeholder communication

Formation

Bachelor’s degree in CS/IT/Cybersecurity

Master’s degree preferred

Description du poste

The Cybersecurity Lead reports to the CISO and leads the execution of the organization’s cybersecurity, information security, governance, risk, and compliance agenda in Saudi Arabia.

The role is responsible for strengthening the organization’s security posture, ensuring regulatory and enterprise compliance, managing cyber risks and audits, and working closely with business, technology, and leadership stakeholders.

• Act as the lead and SPOC for Information Security, Cybersecurity, and GRC initiatives in Saudi Arabia under the direction of the CISO.
• Lead the implementation and continuous improvement of the Cybersecurity, Information Security, and GRC function.
• Ensure alignment with Saudi regulatory requirements, enterprise security standards, and client security requirements.
• Manage cybersecurity risk assessments, risk acceptance, mitigation, vulnerability management, and security assurance activities.
• Identify, assess, quantify, report, communicate, and monitor security gaps and associated remediation plans.
• Lead internal, statutory, client, and certification audits from an Information Security and IT perspective.
• Manage security certifications and compliance programs, including ISO 27001 and NCA ECC requirements.
• Review and strengthen security policies, procedures, controls, and the Security Assurance Framework.
• Develop cybersecurity and GRC dashboards, KPIs, metrics, and management reports for the CISO and leadership.
• Support the CISO with cybersecurity, GRC, and IT risk management updates and presentations.
• Demonstrate security compliance and control effectiveness to internal stakeholders, clients, and auditors.
• Participate in client discussions, RFIs, RFPs, and proposals related to cybersecurity and information security.
• Coordinate with enterprise and local teams to ensure consistency in security policies and procedures.
• Support budget planning and manage cybersecurity-related PR/PO processes.

Experience & Qualifications

• Minimum 9 years of progressive experience in Information Security, Cybersecurity, GRC, or Risk Management.
• Minimum 5 years of leadership experience.
• Proven experience establishing or leading Information Security/Cybersecurity functions.
• Strong knowledge of Saudi Arabian cybersecurity regulations and compliance requirements.
• Experience with NCA ECC, ISO 27001, security audits, certifications, risk management, and regulatory compliance.
• Hands-on experience in risk assessment, vulnerability management, security assurance, risk acceptance, and mitigation planning.
• Experience working with CISO/CIO and other senior leadership stakeholders.
• Strong client-facing experience, including security presentations, RFIs, RFPs, and audits.
• Experience developing cybersecurity dashboards, metrics, and executive-level reporting.
• Knowledge of security budget management and PR/PO processes.
• Excellent stakeholder management, presentation, and communication skills.

Education

• Required: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related discipline.
• Preferred: Master’s degree in information security, Business Administration, Technology Management, or a related field.