Cybersecurity Governance Risk & Operations Lead

About Sirar by stc

Sirar by stc, established by stc, is an advanced technology and cybersecurity company. As a cutting-edge cybersecurity provider, Sirar by stc empowers organizations to manage their cyber capabilities and digital environments. The company offers a comprehensive range of solutions to help organizations operate online safely, securely, and efficiently, detecting and preventing cybersecurity attacks and safeguarding digital futures.

The Role

Sirar by stc is seeking a Cybersecurity Governance Risk & Operations Lead to join their team in Riyadh. This full-time role requires 5-10 years of experience and involves leading cybersecurity initiatives to strengthen the organization's security posture, overseeing governance, risk management, and compliance, and driving continuous maturity improvements.

Key Responsibilities

• Lead and manage cybersecurity initiatives to enhance the organization's overall security posture.
• Oversee cybersecurity governance, risk management, and compliance activities, ensuring alignment with regulatory and business requirements.
• Develop and maintain cybersecurity frameworks, policies, standards, procedures, and operating models.
• Ensure continuous compliance with National Cybersecurity Authority (NCA) requirements.
• Manage and optimize cybersecurity technologies and security platforms for maximum effectiveness and operational efficiency.
• Oversee Security Operations Center (SOC) activities, including 24/7 monitoring, threat detection, incident response, and security operations.
• Direct vulnerability management, remediation, patch management, and cyber defense activities.
• Lead cybersecurity incident management and coordinate response efforts to minimize business impact.
• Drive continuous cybersecurity maturity improvement through assessments, strategic initiatives, and best practice implementation.
• Provide cybersecurity advisory and strategic support to IT and business stakeholders.
• Manage cybersecurity projects, ensuring successful delivery within scope, budget, and timelines.
• Develop cybersecurity metrics, dashboards, and executive reports to measure performance and support decision-making.
• Coordinate protection and defense activities, ensuring timely resolution of identified risks and vulnerabilities.
• Enhance organizational security readiness through proactive monitoring, threat management, and resilience initiatives.
• Ensure effective collaboration among internal teams, external vendors, and stakeholders to support cybersecurity objectives.
• Deliver all assigned cybersecurity programs, projects, and operational activities to maintain a secure and resilient environment.

Experience and Qualifications

• A minimum of 5 to 10 years of experience in cybersecurity.
• Demonstrated ability to lead and manage complex cybersecurity initiatives.
• Strong understanding of cybersecurity governance, risk management, and compliance frameworks.
• Experience with Security Operations Center (SOC) activities and incident response.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, focusing on maintaining a secure and resilient digital environment for organizations.