Strategic CISO: Regulated Finance & Cyber Defense

فلووس | Flooss; Riyadh; On-site; SAR 900,000 - 1,300,000; Full time

Job summary

AL-AN Alkhaligia for Consumer Microfinance Company (Flooss) in Saudi Arabia seeks a strategic CISO to lead the independent cybersecurity function, protecting information assets, customer data, and digital services while ensuring compliance with SAMA and PDPL. You will own strategy, governance, risk management, and security operations, partnering with IT, risk, and executive management.

The role requires at least 10 years in cybersecurity, 5 in leadership, financial sector experience, and senior

Qualifications

• Bachelor's degree in a relevant field; Master's preferred for strategic roles.
• Minimum 10 years in cybersecurity with 5+ in leadership.
• Experience in financial services, fintech, or consumer finance.
• SAMA-regulated entity leadership experience preferred; strong certifications required.

Responsibilities

• Define and execute cybersecurity strategy, governance, and budget.
• Lead risk management, regulatory compliance, and audits with timely closure.
• Oversee security operations including SOC, incident response, and threat intel.
• Define security architecture, data protection, IAM, and third-party risk.
• Build and develop the cybersecurity team and talent pipeline.

Skills

Cybersecurity leadership

GRC

Security operations

IAM/PAM

Cloud security

Data protection

Vulnerability management

Vendor risk

BC/DR

ISO/NIST/PCI

Education

Bachelor's degree in Cybersecurity, CS, IT, Engineering

Master's degree preferred (Cybersecurity/InfoSec/MBA)

Tools

CISSP

CISM

CISA

CRISC

ISO 27001 Lead Implementer/Auditor

CCSP

Job description

AL-AN Alkhaligia for Consumer Microfinance Company (Flooss) in Saudi Arabia seeks a strategic CISO to lead the independent cybersecurity function, protecting information assets, customer data, and digital services while ensuring compliance with SAMA and PDPL. You will own strategy, governance, risk management, and security operations, partnering with IT, risk, and executive management.

The role requires at least 10 years in cybersecurity, 5 in leadership, financial sector experience, and senior