Head of Cyber Security

About the Role

Salla is seeking an experienced Head of Cyber Security to lead cybersecurity operations, governance, risk management, and regulatory compliance. This full-time position is based in Jeddah, Makkah Province. The role involves overseeing security across payment platforms and technology infrastructure, with a focus on SAMA compliance.

Key Responsibilities

• Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with the SAMA Cyber Security Framework (CSF) and applicable regulatory requirements.
• Lead cybersecurity risk assessments, compliance reviews, internal audits, and remediation activities.
• Oversee daily security operations, threat monitoring, detection, and incident response activities.
• Manage security monitoring solutions, including SIEM, EDR/XDR, firewalls, and intrusion detection/prevention systems (IDS/IPS).
• Lead cybersecurity incident investigations, root cause analysis, and corrective actions.
• Oversee network security controls, firewall configurations, access management, and infrastructure protection.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Ensure appropriate security controls are implemented across web applications, APIs, mobile applications, and payment platforms.
• Lead vulnerability assessments, security testing, and remediation tracking.
• Evaluate cybersecurity risks across applications, networks, cloud environments, and third-party integrations.
• Lead cybersecurity initiatives, manage security projects, and mentor cybersecurity team members.
• Develop and deliver cybersecurity awareness and training programs.

Qualifications and Experience

• A minimum of 5 to 10 years of cybersecurity experience is required.
• Demonstrated experience within SAMA-licensed financial institutions or FinTech companies.
• Proven hands-on experience implementing SAMA cybersecurity requirements.
• Experience managing security operations and responding to security incidents.
• Ability to lead cybersecurity initiatives effectively.

Technical Skills

• Proficiency in managing security monitoring solutions (SIEM, EDR/XDR, firewalls, IDS/IPS).
• Understanding of network security controls and access management.
• Knowledge of integrating security into the Software Development Life Cycle (SDLC).
• Familiarity with secure architecture reviews, application security assessments, and penetration testing.

Leadership and Communication

• Ability to coordinate with IT, Engineering, Risk, Compliance, and business stakeholders.
• Skill in preparing cybersecurity KPIs, risk reports, and security posture updates for senior management.
• Strong leadership capabilities to mentor team members and drive initiatives.

Application Process

Candidates interested in this role are encouraged to apply. Salary details will be discussed during the interview process.