Director of Cyber Security

About the Role

The Water Transmission Company (شركة نقل المياه) is seeking a Director of Cyber Security to join their team in Riyadh, Saudi Arabia. This full-time role involves providing strategic leadership, governance, and oversight for the organization’s cybersecurity posture. The Director will manage and integrate Cybersecurity GRC, Cybersecurity Operations (OT & IT), and Cybersecurity Architecture & Project functions to ensure the protection of information assets, operational technologies, and digital infrastructure against evolving cyber threats.

Key Responsibilities

• Develop and continuously improve cybersecurity policies, procedures, and controls.
• Formulate cybersecurity strategic and operational plans aligned with WTCO’s vision, mission, and objectives.
• Manage the cybersecurity budget, identifying opportunities for cost reduction and performance improvement.
• Fulfill ESG responsibilities and requirements in line with organizational strategy.
• Set and monitor cybersecurity KPIs to track progress towards strategic objectives.
• Prepare timely and accurate cybersecurity reports meeting quality standards.
• Identify opportunities for continuous improvement in cybersecurity systems and practices.
• Ensure compliance with all applicable laws, rules, regulations, and standards within WTCO.
• Develop the organization’s overarching cybersecurity strategy by integrating GRC, Operations (OT & IT), and Architecture functions.
• Oversee the formulation and implementation of cybersecurity policies, standards, and governance models, ensuring compliance with national and international regulations.
• Approve strategic and operational plans from each cybersecurity function to ensure budget alignment and resource allocation efficiency.
• Direct the creation of enterprise-wide cybersecurity risk management programs.
• Lead the integration of security-by-design and Zero Trust Architecture principles into technology deployments and infrastructure upgrades.
• Establish governance frameworks for AI/ML systems, emerging technologies, and OT/IT convergence.
• Guide the design, validation, and implementation of secure architectures, cloud integrations, and network segmentation.
• Supervise the development and operation of the Security Operations Center (SOC).
• Champion enterprise-wide cybersecurity awareness and training programs.
• Oversee compliance with privacy, data protection, and ESG-related security requirements.
• Manage large-scale cyber incident investigations, root cause analysis, and post-incident governance.
• Approve vendor and third-party cybersecurity risk assessment processes.
• Review and endorse KPIs, KRIs, and cybersecurity maturity indicators for executive reporting.
• Align cybersecurity priorities with business continuity and disaster recovery strategies.
• Represent the organization in cybersecurity regulatory and industry forums.
• Coordinate collaboration between cybersecurity, legal, procurement, and business units.
• Drive the evaluation and adoption of advanced detection, monitoring, and analytics technologies.
• Ensure integration of cybersecurity metrics into enterprise performance dashboards.

Qualifications and Experience

• Bachelor’s degree in Computer Science or Information Technology.
• Master’s degree in Cybersecurity or Management.
• A minimum of 10 years of relevant experience.

Stakeholder Engagement

The role requires extensive communication and collaboration with various internal and external stakeholders. Internally, this includes all departments within the Water Transmission Company. Externally, engagement will involve consultants, contractors, vendors, suppliers, service providers, and government authorities and entities.