Cybersecurity Officer (Mid-Level) - at Sadu Portfolio Company

Sadu Capital; Saudi Arabia; On-site; SAR 200,000 - 340,000; Full time

Benefits offered by this job

Competitive pay

Equity options

Regulator exposure

Cross-functional learning

Job summary

Sadu Capital, a fast-scaling fintech in Saudi Arabia, is hiring a Cybersecurity Officer (Mid-Level) to build and run AML/CTF and regulatory frameworks in support of upcoming licensing. You will collaborate with legal, product, regulators (SAMA), and GRC providers to implement CSF/CRFR controls, conduct vulnerability management, and ensure ISO 27001 compliance.

Excellent English and Arabic communication, plus fintech risk and cloud security experience, will help you thrive in a fast-paced

Qualifications

• Bachelor's in Law, Finance, or Business required.
• 3–7 years in a regulated financial institution or fintech.
• Familiar with AML/CTF frameworks and SAMA compliance.
• Experience with GRC tools and digital KYC platforms.
• Excellent English and Arabic communication.

Responsibilities

• Support the implementation of cybersecurity policies with CSF/CRFR.
• Coordinate vulnerability assessments, penetration testing, and log analysis.
• Maintain ISO 27001, NCA ECC, and SAMA CSF controls.
• Manage security tools: firewalls, endpoint protection, threat detection.
• Support incident response planning and simulated attack exercises.
• Maintain access control, third-party risk, data classification, and BCP/DR testing.
• Monitor GCP for misconfigurations and secure deployment practices.

Skills

Bilingual communication

Education

Bachelor's in Law/Finance/Business

Tools

GRC tools

Digital KYC platforms

Job description

The company is a fast-scaling fintech in Saudi Arabia providing invoice-based BNPL and factoring solutions to underserved micro-businesses in the grocery and pharma supply chains. We are backed by top-tier VCs and part of the SAMA Regulatory Sandbox. As we prepare for full licensing, we’re hiring a Compliance powerhouse to help build and run our AML/CTF and regulatory frameworks.

Role Overview

The position of Cybersecurity Officer (Mid-Level) will work closely with internal legal & product teams, external regulators (SAMA), and our GRC & AML solution providers (Faceki, ELM, Wathiq, etc.).

Key Responsibilities

Support the implementation of cybersecurity policies and procedures in accordance with SAMA’s Cybersecurity Framework (CSF) / (CRFR)

Conduct regular vulnerability assessments, penetration testing coordination, and log analysis

Work with the virtual CISO and senior consultants to maintain compliance with ISO 27001, NCA ECC, and SAMA CSF controls

Manage day-to-day security tools such as firewalls, endpoint protection, and threat detection systems

Support incident response planning, playbook development, and simulated attack exercises

Maintain documentation related to access control, third-party risk, data classification, and BCP/DR testing

Monitor cloud infrastructure (GCP) for misconfigurations, anomalies, and ensure secure deployment practices

Required Qualifications & Experience

Bachelor’s in Law, Finance, Business, or related field (Master’s or certification a plus)

3–7 years in a regulated financial institution or fintech (preferably under SAMA, CMA, or global central bank)

Deep familiarity with AML/CTF frameworks and/or SAMA compliance regulations

Experience with GRC tools and digital KYC platforms

Strong understanding of fintech and digital onboarding flows

Excellent English and Arabic communication (written & spoken)

Preferred Certifications

CAMS, CFE, ICA, CRCMP, or similar AML/Compliance certifications is advantage

Experience with ISO 27001, NCA controls, or PCI-DSS is a plus

What We Offer

The opportunity to shape the compliance culture at a fast-growing fintech

Direct interaction with regulators and decision-makers

Competitive compensation and equity options

Fast-track learning environment with exposure to cross-functional teams