IT Security Lead: SAP, Cloud & Risk Strategy

Al Safi Danone | الصافي دانون; Riyadh; On-site; SAR 350,000 - 550,000; Full time

Job summary

Al Safi Danone | الصافي دانون is seeking an IT Security Lead to drive ASD’s enterprise information security program with a focus on SAP S/4HANA, Microsoft platforms, cloud, and operational technology. The role reports to executive leadership and the board within the B-ITSC framework.

You will own security strategy and policies, lead risk assessments, incident response, and regulatory compliance (PDPL, GDPR, NCA ECC), while partnering with SOC and IAM programs.

Qualifications

• Bachelor's degree in a cybersecurity, CS, or information systems field.
• CISM or CISA certification required or preferred.
• SC-200/SC-300 certification advantageous.
• 5–8 years in information security with 3+ years in a leadership role.
• Proven SAP security experience including SoD analysis and audit readiness.
• Cloud security expertise across Azure, AWS, or GCP environments.
• Familiarity with PDPL and NCA ECC frameworks; strong risk communication.

Responsibilities

• Own and execute ASD’s information security strategy, policy, and roadmap.
• Coordinate policies, standards, and procedures across the organization.
• Lead incident response activities and maintain response playbooks.
• Conduct regular security risk assessments and manage risk register.
• Ensure regulatory compliance with PDPL, GDPR, and NCA ECC.
• Collaborate with SOC and IAM programs, including PAM and Zero Trust.
• Oversee SAP S/4HANA security design and SoD reviews in UAT and go-live.
• Manage EDR and endpoint security using Microsoft Defender for Endpoint.
• Drive security awareness, training, and phishing simulation programs.

Skills

Information security leadership

Risk management

Incident response

Security governance

Executive communication

SoD analysis

Security auditing

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field

Tools

SAP S/4HANA security

Azure Active Directory

Defender for Endpoint

Zero Trust

Job description

Al Safi Danone | الصافي دانون is seeking an IT Security Lead to drive ASD’s enterprise information security program with a focus on SAP S/4HANA, Microsoft platforms, cloud, and operational technology. The role reports to executive leadership and the board within the B-ITSC framework.

You will own security strategy and policies, lead risk assessments, incident response, and regulatory compliance (PDPL, GDPR, NCA ECC), while partnering with SOC and IAM programs.