Saudi CISO: Cybersecurity Strategy & Risk Leadership

Jari Solutions; Riyadh; On-site; SAR 600,000 - 1,200,000; Full time

Job summary

Jari Solutions is seeking a Chief Information Security Officer (CISO) to lead the organization's cybersecurity function, ensuring protection of information assets and compliance with SAMA CSF. The role encompasses strategy, governance, risk management, and incident response to reach a minimum cybersecurity maturity Level 3.

The CISO will drive security programs, governance across business initiatives, and reporting to the Board while coordinating with Compliance and IT.

Qualifications

• Saudi national.
• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Systems, or a related discipline.
• Minimum of 8 years of experience in cybersecurity or information security, including at least 3 years in a leadership or supervisory role.
• Practical knowledge of SAMA CSF, cybersecurity governance, risk management, and regulatory compliance.
• Full-time commitment to the CISO role, without concurrent responsibilities within the Information Technology Department.
• Ability to meet applicable professional suitability and integrity requirements and obtain the required SAMA non-objection approval.

Responsibilities

• Develop and implement the cybersecurity strategy, policies, standards, and procedures in alignment with organizational objectives and regulatory requirements.
• Establish and maintain cybersecurity governance frameworks, define roles and responsibilities, and integrate security requirements into business projects and initiatives.
• Report cybersecurity risks, maturity levels, compliance status, and key performance indicators to senior management, the Cybersecurity Committee, and the Board of Directors.
• Develop and manage the cybersecurity budget, lead the cybersecurity team, and oversee employee development and awareness programs.
• Establish and oversee cybersecurity risk management processes, maintain the risk register, conduct risk assessments, and monitor mitigation plans.
• Assess cybersecurity risks associated with third parties, outsourced services, cloud environments, and significant technology changes.
• Ensure compliance with SAMA CSF and applicable regulatory requirements and lead cybersecurity maturity assessments and internal and external audits.
• Manage corrective action plans, track audit and regulatory findings, and coordinate regulatory reporting with the Compliance Department.
• Oversee cybersecurity event monitoring, threat detection, vulnerability management, penetration testing, and security operations.
• Approve and lead cybersecurity incident response activities, ensure timely regulatory reporting, and implement lessons learned following incidents.
• Oversee cybersecurity controls across networks, applications, endpoints, identity management, and cloud services.
• Maintain organizational independence from the Information Technology Department, including reporting lines, budget management, and employee performance evaluation.

Skills

Leadership

Executive communication

Risk reporting

Crisis management

Incident response

Vendor management

Stakeholder engagement

Strategic thinking

Education

Bachelor's in Cybersecurity

Master's degree (preferred)

CISSP

CISM

CRISC

CGIT/IS0-IEC 27001 Lead Auditor/Lead Implementer

Tools

GRC platforms

SIEM

SOC

IAM

PAM

EDR/XDR

DLP

Job description

Jari Solutions is seeking a Chief Information Security Officer (CISO) to lead the organization's cybersecurity function, ensuring protection of information assets and compliance with SAMA CSF. The role encompasses strategy, governance, risk management, and incident response to reach a minimum cybersecurity maturity Level 3.

The CISO will drive security programs, governance across business initiatives, and reporting to the Board while coordinating with Compliance and IT.