Director of Cyber Security

شركة نقل المياه Water Transmission Company; Riyadh; Presencial; SAR 900 000 - 1 300 000; Tempo integral

Resumo da oferta

Water Transmission Company seeks a senior cybersecurity leader to drive strategic governance across GRC, cybersecurity operations (OT & IT), and architecture. You will align security with WTCO’s strategic objectives, build budgets, KPIs, and ensure compliance with global and national standards.

Responsibilities include policy development, risk management, incident response, vendor risk, and ESG-aligned security programs. A strong leadership record in enterprise security is essential.

Qualificações

• Bachelor's degree in computer science or information technology.
• Master's degree in cybersecurity or management.
• Extensive experience in leading enterprise cybersecurity programs.

Responsabilidades

• Develop and govern cybersecurity policies, standards, and controls.
• Lead GRC, OT/IT security operations, and architecture integration.
• Set KPIs, monitor maturity, and report to executives.
• Ensure compliance with national and international regulations.
• Oversee cybersecurity budgeting and cost optimization.
• Drive incident response, risk assessment, and supplier risk.
• Promote ESG-related cybersecurity practices and training.

Conhecimentos

Cybersecurity strategy

Governance

GRC

SOC oversight

Risk management

Regulatory compliance

Budget planning

Vendor risk assessment

Formação académica

Bachelor's in Computer Science or Information Technology

Master's in Cybersecurity or Management

Ferramentas

SOC

Zero Trust Architecture

Cloud security

Descrição da oferta de emprego

The job holder is responsible for provide strategic leadership, governance, and oversight for the organization’s cybersecurity posture by managing and integrating the Cybersecurity GRC, Cybersecurity Operations (OT & IT), and Cybersecurity Architecture & Project functions. The role ensures the protection of information assets, operational technologies, and digital infrastructure against evolving cyber threats.

Key Roles and Responsibilities

• Develop Cybersecurity policies, procedures, and controls covering all areas of assigned Cybersecurity activity and provide continuous improvement recommendations.
• Develop Cybersecurity strategic and operational plans, ensuring alignment with WTCO’s strategy, vision, mission, and corporate objectives.
• Develop a Cybersecurity budget and ensure potential areas of cost reduction or performance improvement opportunities are capitalized upon.
• Fulfill ESG responsibilities and requirements in line with the strategy and ESG-related initiatives.
• Set Cybersecurity KPIs and monitor progress and development toward WTCO strategic objectives. Identify the management needs of competencies and talents and provide recommendations with regard to human resources decisions.
• Develop all Cybersecurity reports in a timely and accurate manner while ensuring meeting the requirements, policies, and quality standards.
• Delegate duties, responsibilities, and authorities to appropriate team members within the business in case of absence.
• Identify opportunities for continuous improvement of Cybersecurity’s systems and practices taking into consideration leading practices, cost reduction, and productivity improvement.
• Ensure that all work is carried out efficiently, in line with the annual business plans, goals, policies, processes, procedures, and instructions.
• Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..).
• Escalate problems to ensure case/issue is closed efficiently and in a timely manner.
• Develop the organization’s overarching cybersecurity strategy by integrating GRC, Operations (OT & IT), and Architecture functions to establish a unified, enterprise-wide protection framework.
• Oversee the formulation, implementation, and continuous improvement of cybersecurity policies, standards, and governance models to ensure compliance with national (e.g., NCA) and international regulations.
• Approve strategic and operational plans from each cybersecurity function to ensure budget alignment, resource allocation efficiency, and strategic goal achievement.
• Direct the creation of enterprise-wide cybersecurity risk management programs to identify, assess, and mitigate security risks across all digital and operational environments.
• Lead the integration of security-by-design and Zero Trust Architecture principles into enterprise technology deployments, digital transformation initiatives, and critical infrastructure upgrades.
• Establish governance frameworks for AI/ML systems, emerging technologies, and OT/IT convergence to ensure ethical use, data integrity, and protection from adversarial attacks.
• Guide the design, validation, and implementation of secure architectures, cloud integrations, and network segmentation to strengthen defense-in-depth capabilities.
• Supervise the development and operation of the Security Operations Center (SOC) to ensure real-time detection, incident containment, and response across OT and IT domains.
• Champion enterprise-wide cybersecurity awareness and training programs to foster a culture of security ownership, accountability, and continuous learning.
• Oversee compliance with privacy, data protection, and ESG-related security requirements, ensuring alignment with organizational sustainability and governance objectives.
• Manage large-scale cyber incident investigations, root cause analysis, and post-incident governance to institutionalize lessons learned and prevent recurrence.
• Approve vendor and third-party cybersecurity risk assessment processes to safeguard supply chain ecosystems and enforce contractual compliance.
• Review and endorse KPIs, KRIs, and cybersecurity maturity indicators for executive reporting and strategic decision-making.
• Align cybersecurity priorities with business continuity and disaster recovery strategies, ensuring resilience against ransomware, industrial sabotage, and operational disruptions.
• Represent the organization in cybersecurity regulatory and industry forums, influencing policy development and ensuring early adoption of best practices.
• Coordinate the collaboration between cybersecurity, legal, procurement, and business units to streamline risk acceptance, impact assessments, and audit readiness.
• Drive the evaluation and adoption of advanced detection, monitoring, and analytics technologies to enhance threat intelligence, situational awareness, and proactive defense.
• Ensure integration of cybersecurity metrics into enterprise performance dashboards, enabling real-time visibility of risk posture and mitigation progress.

Job Requirements

• Bachelors in Computer Science or Information Technology
• Master’s in Cybersecurity or Management

Key Communications

• Internal Stakeholders
• All Departments

External Stakeholders

• Consultants/Contractors
• Government authorities and entities

Disclaimer

The above job description is meant to describe the general nature and level of work being performed; it is not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required for the position. Accordingly, there is no way this Job Description states or implies that these are the only duties to be performed by the employee in this position. Employees will be required to follow any other job-related instructions and to perform other job-related duties.