Cybersecurity Strategy & Compliance Lead (IT/OT)

National Initiative Human Resource Company; Jeddah; On-site; SAR 300,000 - 540,000; Full time

Job summary

National Initiative Human Resource Company is seeking an experienced Cybersecurity Manager to lead the cybersecurity strategy, governance, risk management, operations, and compliance across Saudi operations.

The role focuses on protecting IT and OT environments, ensuring compliance with NCA ECC, CCC, OTCC, and PDPL, and strengthening resilience through audits, incident response, and threat monitoring.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• 8–10 years of relevant cybersecurity experience in GRC or IT security.
• 4+ years in a leadership or management role.
• Practical experience in manufacturing IT/OT environments and risk assessments.
• Strong knowledge of Saudi regulatory requirements (NCA ECC, CCC, OTCC, PDPL) and audits.

Responsibilities

• Lead and implement the cybersecurity strategy, roadmap, and initiatives across Saudi operations.
• Develop and maintain cybersecurity policies, procedures, standards, and governance frameworks.
• Oversee SOC activities, incident response, and threat monitoring.
• Manage internal and external cybersecurity audits and compliance assessments.
• Ensure security requirements are integrated into IT, OT, cloud, infrastructure, and manufacturing projects.
• Lead cybersecurity awareness initiatives and coordinate incident response exercises.
• Report cybersecurity risks, incidents, and performance to senior management.
• Lead and develop the cybersecurity team, defining responsibilities and priorities.

Skills

Cybersecurity leadership

GRC

IT security

Manufacturing IT/OT security

Education

Bachelor's degree

Job description

National Initiative Human Resource Company is seeking an experienced Cybersecurity Manager to lead the cybersecurity strategy, governance, risk management, operations, and compliance across Saudi operations.

The role focuses on protecting IT and OT environments, ensuring compliance with NCA ECC, CCC, OTCC, and PDPL, and strengthening resilience through audits, incident response, and threat monitoring.