Data Protection Expert (Information Security)

MENA Consultant; Riyadh; On-site; SAR 200,000 - 250,000; Full time

Job summary

A leading consulting firm is seeking a Data Protection (Information Security) Expert for a 1-year engagement in Riyadh. This role requires 6+ years of experience in information security, proven skills in ISO 27001 implementation, and strong stakeholder management. The expert will lead security programs aligned with international standards and work closely with clients to ensure compliance. Fluency in both Arabic and English is essential. This position requires a structured, analytical mindset and the ability to guide client teams effectively.

Qualifications

• 6+ years of professional experience in information security.
• Proven experience with ISO 27001 and regulatory standards.
• Strong communication skills in Arabic & English.

Responsibilities

• Lead information security engagements across client environments.
• Conduct gap assessments against national and international standards.
• Develop and implement security improvement plans.

Skills

Information security

ISO 27001 implementation

Stakeholder management

Compliance assessments

Team leadership

Education

Bachelor’s degree in Computer Science or related field

Job description

Data Protection (Information Security) Expert - 1-Year Engagement

Location: Riyadh, KSA. Years of Experience: 6+ years. Project Duration: 1 year. Working Arrangement: on-site. Language Requirements: Fluency in Arabic & English (written and spoken). Starting Date: as soon as possible.

We are seeking an experienced Data Protection (Information Security) Expert to support a major client engagement focused on information security initiatives. The role will lead and deliver end-to-end security programs aligned with national and international standards, while working closely with client stakeholders.

Key Requirements

• 6+ years of professional experience.
• Proven experience in information security.
• Hands‑on experience with ISO 27001 implementation.
• Experience with NCA (ECC and DCC) regulations.

Other Qualifications

• Bachelor’s degree in Computer Science, Information Security, IT, or related field.
• Strong stakeholder management and communication skills.
• Ability to work independently and manage multiple workstreams.
• Structured, analytical, and detail‑oriented approach.
• Capable of leading teams and mentoring junior consultants.

Key Responsibilities

• Lead and deliver information security and compliance engagements across client environments.
• Conduct gap assessments against standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
• Develop and implement remediation roadmaps and security improvement plans.
• Design and maintain security policies, procedures, and governance frameworks.
• Oversee vulnerability assessments, technology reviews, and security control testing.
• Provide guidance and knowledge transfer to client teams on best practices.
• Manage day‑to‑day engagement activities and ensure timely, high‑quality deliverables.

Interested in building your career at MENA Consultant? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf.