Cybersecurity, Risk & Resilience Lead

DirectFN [Direct Financial Network Company]; Riyadh; On-site; SAR 350,000 - 650,000; Full time

Job summary

DirectFN is seeking a Cybersecurity, Risk and Resilience Manager to lead governance, enterprise risk management, and business continuity programs in a fintech environment in Saudi Arabia. You will collaborate with IT, legal, and compliance teams and report to the COO.

You will oversee a Cybersecurity Specialist, manage risk assessments, audits, and regulatory mappings (SAMA, NCA, ISO 27001, GDPR), and drive resilience across critical platforms while ensuring incident response readiness.

Qualifications

• Bachelor's degree in IT security, information systems, finance, or law; Master’s preferred.
• Minimum 7 years in cybersecurity governance, IT risk, or compliance within financial services or fintech.
• Strong knowledge of SAMA CSF, NCA, ISO 27001, NIST, and GDPR.
• Experience managing enterprise risk programs, risk assessments, and KRIs.
• Experience with business continuity planning and operational resilience.
• Excellent analytical, communication, and stakeholder management skills.

Responsibilities

• Cybersecurity Governance: develop, maintain, and enforce policies; align with ISO 27001, NIST, SAMA CSF.
• Enterprise Risk Management: run risk program, maintain risk registers, and report to leadership.
• Business Continuity & Operational Resilience: lead BCP, BIAs, and resilience testing.
• Compliance & Regulatory Management: monitor SAMA, NCA, GDPR, ISO 27001; support audits.
• Incident & Breach Management: manage incident response, playbooks, and post-incident reviews.
• Team Oversight: direct Cybersecurity Specialist and engage IT, legal, product, and operations.

Skills

Cybersecurity Governance

Risk Management

Regulatory Awareness

Incident Management

Stakeholder Communication

Ethical Judgment

Education

Bachelor's degree (IT Security / IS / Finance / Law)

Master's degree preferred

Job description

DirectFN is seeking a Cybersecurity, Risk and Resilience Manager to lead governance, enterprise risk management, and business continuity programs in a fintech environment in Saudi Arabia. You will collaborate with IT, legal, and compliance teams and report to the COO.

You will oversee a Cybersecurity Specialist, manage risk assessments, audits, and regulatory mappings (SAMA, NCA, ISO 27001, GDPR), and drive resilience across critical platforms while ensuring incident response readiness.