Senior Cyber Risk Strategy & Governance Lead

SAUDI AIRLINES; Jeddah; On-site; SAR 350,000 - 600,000; Full time

Job summary

SAUDI AIRLINES is seeking a senior cybersecurity leader to develop, implement, and continuously enhance the enterprise risk management framework. You will oversee identification, assessment, treatment, and monitoring of cyber risks across functions, cloud environments, and third‑party ecosystems.

The role drives governance, ensures regulatory and standards compliance, and provides executive-level guidance. You will lead a team, deliver risk posture dashboards to executives and regulators, and

Qualifications

• Minimum 11 years of work experience.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related discipline.
• Relevant professional certification preferred.

Responsibilities

• Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
• Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
• Define risk appetite and tolerance levels in collaboration with executive leadership.
• Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
• Review and approve major assessment findings, treatment plans, and residual risk acceptances.
• Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
• Ensure risk assessments are performed consistently and accurately across all business units.
• Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
• Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
• Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
• Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
• Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
• Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
• Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.

Skills

Leadership

Cybersecurity risk management

Stakeholder engagement

Executive reporting

Regulatory compliance

Risk governance

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related discipline

Relevant professional certification

Job description

SAUDI AIRLINES is seeking a senior cybersecurity leader to develop, implement, and continuously enhance the enterprise risk management framework. You will oversee identification, assessment, treatment, and monitoring of cyber risks across functions, cloud environments, and third‑party ecosystems.

The role drives governance, ensures regulatory and standards compliance, and provides executive-level guidance. You will lead a team, deliver risk posture dashboards to executives and regulators, and