Information Security Officer

Soum; Riyadh; On-site; SAR 200,880 - 357,120; Full time

Job summary

Soum, a fast-growing re-commerce startup in the MENA region, seeks a cybersecurity/compliance expert to guide our security posture as we move into regulated spaces like auto-financing.

You will lead audits for KSA/SAMA frameworks, review data security strategies, support fintech regulatory submissions, ensure documentation and data protection, and coordinate with product and legal teams to maintain standards.

Qualifications

• Saudi national with 3-4 years of experience.
• Deep understanding of SAMA regulatory requirements and KSA cybersecurity law.
• Experience operating through or with an agency setup (ideal).
• Familiarity with ISO 27001, NIST, SOC 2 compliance standards.
• Ability to lead cross-functional audit and compliance efforts across departments.

Responsibilities

• Lead compliance audits aligned with KSA regulations, especially SAMA frameworks.
• Review and implement data security strategies across departments.
• Support regulatory submissions and responses for fintech operations.
• Oversee documentation and data protection practices.
• Coordinate with product and legal teams to maintain standards.

Skills

Regulatory compliance

Cybersecurity

Audit leadership

Tools

ISO 27001

NIST

SOC 2

Job description

Work Week: Sunday - Thursday

Work Timings: 9 AM - 6 PM (Saudi Arabian Time Zone)

About Us:

Soum is on a mission to revolutionize e-commerce in the MENA region and beyond by building the most convenient and trustworthy re-commerce marketplace in the region. We're reshaping how C2C marketplaces operate, making buying and selling second-hand products seamless and reliable. Since our launch in July 2021, Soum has become one of the fastest-growing startups in the region, achieving rapid expansion in both our team and product offerings. In recognition of our impact and growth, we were proudly named one of the Top 10 LinkedIn Startups in Saudi Arabia for 2024.

Job Summary:

We are looking for a virtual cybersecurity or compliance expert to guide our security posture, particularly as we move into regulated spaces like auto-financing. The role is ideal for someone with extensive regulatory familiarity and previous experience operating in a strategic advisory capacity.

Key Responsibilities:

• Lead compliance audits aligned with KSA regulations, especially SAMA frameworks
• Review and implement data security strategies across departments
• Support regulatory submissions and responses for fintech operations
• Oversee documentation and data protection practices
• Coordinate with product and legal teams to maintain standards

Ideal Profile:

• Saudi national 3-4 years experience
• Deep understanding of SAMA regulatory requirements and KSA cybersecurity law
• Experience operating through or with an agency setup (ideal)
• Familiarity with ISO 27001, NIST, SOC 2 compliance standards
• Ability to lead cross-functional audit and compliance efforts across departments

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.