Head of Cyber Security - PayLink

Salla; Jeddah; On-site; SAR 250,000 - 420,000; Full time

Job summary

Salla is seeking an experienced Cyber Security Manager to lead governance, risk, and compliance across our technology platforms in Saudi Arabia. You will oversee security operations, incident response, and vulnerability management while guiding SDLC security integration and security architecture practices.

The role requires strong leadership, hands-on experience with SIEM/EDR/XDR and regulatory frameworks; it offers direct collaboration with stakeholders and opportunities to shape security

Qualifications

• 5+ years of cybersecurity experience within SAMA-licensed financial institutions, banks, payment service providers, or FinTech in Saudi Arabia.
• Hands-on with SAMA CSF implementation and regulatory audits.
• Experience leading SOC, security monitoring, and incident response initiatives.
• Strong knowledge of network, application, and cloud security practices.

Responsibilities

• Lead governance, risk management, and compliance activities across platforms and tech infra.
• Oversee security operations, monitoring, and incident response processes.
• Collaborate with development teams to embed security into SDLC and product design.
• Coordinate vulnerability assessments, remediation tracking, and risk reporting.
• Mentor teams, communicate security posture to senior management, and drive awareness.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

SAMA CSF

Security operations

Incident response

Network security

Application security

Vulnerability management

Penetration testing

SDLC integration

SIEM

EDR/XDR

Firewalls

IDS/IPS

Security architecture

Leadership

Training & awareness

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology

Tools

SIEM

EDR/XDR

Firewalls

IDS/IPS

Vulnerability scanning tools

Job description

Job Summary

We are seeking an experienced Cyber Security Manager to lead cybersecurity operations, governance, risk management, and regulatory compliance across PayLink's payment platforms and technology infrastructure.

The ideal candidate will have 5+ years of cybersecurity experience within SAMA-licensed financial institutions or FinTech companies, with demonstrated hands-on experience implementing SAMA cybersecurity requirements, managing security operations, responding to security incidents, and leading cybersecurity initiatives.

Key Responsibilities

Cybersecurity Governance & SAMA Compliance

• Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with the SAMA Cyber Security Framework (CSF) and applicable regulatory requirements.
• Lead cybersecurity risk assessments, compliance reviews, internal audits, and remediation activities.
• Maintain cybersecurity governance documentation, risk registers, and compliance reporting.
• Identify regulatory compliance gaps and develop corrective action plans.

Security Operations & Incident Response

• Oversee daily security operations, threat monitoring, detection, and incident response activities.
• Manage security monitoring solutions, including SIEM, EDR/XDR, firewalls, and intrusion detection/prevention systems (IDS/IPS).
• Lead cybersecurity incident investigations, root cause analysis, and corrective actions.
• Develop, maintain, and test incident response procedures and escalation processes.

Network, Application & Infrastructure Security

• Oversee network security controls, firewall configurations, access management, and infrastructure protection.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Ensure appropriate security controls are implemented across web applications, APIs, mobile applications, and payment platforms.
• Support secure architecture reviews, application security assessments, and penetration testing activities.

Vulnerability & Risk Management

• Lead vulnerability assessments, security testing, and remediation tracking.
• Evaluate cybersecurity risks across applications, networks, cloud environments, and third-party integrations.
• Coordinate with IT and engineering teams to remediate critical vulnerabilities within defined timelines.
• Monitor emerging cyber threats and recommend preventive security measures.

Leadership & Security Awareness

• Lead cybersecurity initiatives, manage security projects, and mentor cybersecurity team members.
• Coordinate with IT, Engineering, Risk, Compliance, and business stakeholders.
• Develop and deliver cybersecurity awareness and training programs.
• Prepare cybersecurity KPIs, risk reports, and security posture updates for senior management.

• Saudi nationality is mandatory.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, CRISC, CEH, or equivalent are preferred. .
• Minimum 5 years of relevant cybersecurity or information security experience within SAMA-licensed financial institutions, banks, payment service providers, or FinTech companies in Saudi Arabia.
• Proven hands-on experience implementing and maintaining controls aligned with the SAMA Cyber Security Framework (SAMA CSF).
• Demonstrated experience in Cybersecurity Governance, Risk Management, and Compliance (GRC), including risk assessments, regulatory audits, and remediation plans.
• Proven experience managing Security Operations (SOC), security monitoring, and cybersecurity incident response.
• Strong technical knowledge of Network Security, Application Security, Vulnerability Management, and Security Architecture.
• Hands-on experience with cybersecurity technologies such as SIEM, EDR/XDR, firewalls, IDS/IPS, and vulnerability scanning tools.
• Experience conducting or overseeing vulnerability assessments, penetration testing, and security remediation activities.
• Demonstrated experience leading cybersecurity projects, coordinating technical teams, or managing cybersecurity professionals.
• Strong communication, analytical, stakeholder management, and problem-solving skills.