Governance Expert

Confidential Government; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Confidential Government is seeking an experienced information security leader to advise on strategy, policies, and procedures within a dynamic security program in Riyadh region. The role entails shaping security controls, architecture reviews, and governance across organizational layers.

The candidate will participate in digital transformation initiatives, ensure regulatory alignment, and supervise strategic cybersecurity projects with emphasis on risk mitigation and incident readiness.

Qualifications

• Minimum of 6 years of experience in a relevant field.
• Bachelor’s degree in Cybersecurity or related field is required.

Responsibilities

• Provides advice on developing the information security strategy, policies, standards, controls, and related procedures.
• Provides advice on activities related to preparing and updating the information security strategy and participating in the development of the digital transformation strategy.
• Reviews activities related to developing information security policies, standards, controls, and related procedures, and continuously reviews them.
• Defines specific information security procedures and updates them as needed and in accordance with established procedures.
• Recommends participation in establishing a framework for roles and responsibilities related to information ownership, classification, accountability controls, and information protection procedures.
• Recommends the supervision of strategic cybersecurity projects.
• Determines the ability of information security controls to mitigate risks and provides recommendations in this regard.
• Recommends activities related to conducting impact assessments when changes occur in specific legislation and policies, and assessing the extent to which they can be implemented.
• Recommends tasks involving responsibility for establishing technical security measures in accordance with policies and standards, and reviewing all technical (architectural) designs and obtaining cybersecurity approval before implementation.
• Reviews activities related to the use of software engineering (architecture) and software systems research to develop new capabilities and ensure cybersecurity integration.
• Reviews reporting activities, such as phishing simulation results, breaches, and follow‑up on awareness with employees.
• Complies with the policies, work conduct, and procedures applicable to the organizational unit.
• Performs any other tasks assigned by direct supervisors.

Education

Bachelor’s degree in Cybersecurity or related field

Job description

• Provides advice on developing the information security strategy, policies, standards, controls, and related procedures.
• Provides advice on activities related to preparing and updating the information security strategy and participating in the development of the digital transformation strategy.
• Reviews activities related to developing information security policies, standards, controls, and related procedures, and continuously reviews them.
• Defines specific information security procedures and updates them as needed and in accordance with established procedures.
• Recommends participation in establishing a framework for roles and responsibilities related to information ownership, classification, accountability controls, and information protection procedures.
• Recommends the supervision of strategic cybersecurity projects.
• Determines the ability of information security controls to mitigate risks and provides recommendations in this regard.
• Recommends activities related to conducting impact assessments when changes occur in specific legislation and policies, and assessing the extent to which they can be implemented.
• Recommends tasks involving responsibility for establishing technical security measures in accordance with policies and standards, and reviewing all technical (architectural) designs and obtaining cybersecurity approval before implementation.
• Reviews activities related to the use of software engineering (architecture) and software systems research to develop new capabilities and ensure cybersecurity integration.
• Reviews reporting activities, such as phishing simulation results, breaches, and follow‑up on awareness with employees.
• Complies with the policies, work conduct, and procedures applicable to the organizational unit.
• Performs any other tasks assigned by direct supervisors.

Required Experience

• Minimum of 6 years of experience in a relevant field.

Education

• Bachelor’s degree in Cybersecurity or any related field.