VP – Information Security & Business Continuity Management (BCM) | KSA (m/f/d)

VP Information Security & Business Continuity Management (BCM) | KSA

A leading financial institution in Saudi Arabia is hiring a VP Information Security & BCM to drive SAMA compliance, cybersecurity governance, and business continuity strategies. Reporting to the Chief Risk Officer (CRO) KSA, this role ensures the bank meets SAMA regulations, PDPL, and global security standards while strengthening its overall risk posture.

Key Responsibilities:

• SAMA Compliance & Cybersecurity Governance Lead the implementation and continuous enhancement of the banks Information Security & BCM frameworks to ensure full compliance with SAMAs Cybersecurity Framework, SAMA CSF, and risk guidelines.
• Business Continuity & Resilience Oversee BCM strategies, disaster recovery (DR) planning, crisis management, and incident response to maintain regulatory compliance and operational resilience.
• Cyber Risk & Threat Management Conduct risk assessments, security audits, penetration tests, and vulnerability management to mitigate cyber threats.
• Regulatory & Data Privacy Compliance Ensure adherence to SAMA CSF, PDPL, PCI DSS, ISO 27001, and other security standards relevant to the financial sector.
• Incident Response & Crisis Management Develop and maintain cybersecurity incident response plans, working closely with IT security teams and regulators to ensure rapid response and containment.
• Stakeholder Engagement & Reporting Collaborate with SAMA, executive leadership, IT, Compliance, and Group Risk to maintain a robust security and risk framework.

What Were Looking For:

• 10+ years of experience in Information Security, BCM, or Risk Management within the banking or financial services sector.
• Deep expertise in SAMA CSF, cybersecurity governance, regulatory compliance, and business continuity.
• Experience implementing and managing ISO 27001, PCI DSS, PDPL, and cloud security standards.
• Strong leadership in driving cybersecurity, data protection, and risk management strategies at a senior level.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, CBCP, or SAMA Cybersecurity Practitioner (if applicable) are a plus.

Why Join

• Strategic Leadership: Take charge of a critical cybersecurity and BCM function for a top-tier financial institution.
• Regulatory Impact: Play a key role in ensuring SAMA compliance and cybersecurity excellence.
• High-Growth Opportunity: Join a forward-thinking organization with strong risk management ambitions.

Location: Saudi Arabia

Requirements: Saudi national