Chief Information Security Officer (CISO)📣 Job Ad

About the Role

Tameed is seeking a **Chief Information Security Officer (CISO)** to join its team in Riyadh. Tameed operates as the first Debt Based Crowd Lending Platform specializing in financing Purchase Orders, licensed by the Saudi Central Bank, offering rapid PO financing solutions.

Key Responsibilities

The CISO will be responsible for leading the Cybersecurity General Department and ensuring that cybersecurity operations within assigned global services and vendors align with corporate and regulatory standards. This includes reporting on cybersecurity status to senior management, assessing and verifying cybersecurity standards, and tracking compliance status of global services and vendors. The role involves supporting the implementation of cybersecurity controls and standards, conducting cybersecurity awareness and training programs, and implementing the SAMA cybersecurity framework. Key duties also include setting up, implementing, and monitoring Security Operations Centers (SOC) and cybersecurity tools, remediating reported incidents, and assisting third-party vendors with setup, monitoring, and remediation. The CISO will evaluate third parties based on requirements, ensure vendor adherence to Tameed's cybersecurity policies, and create necessary policies and procedures within the SAMA framework. Furthermore, the role requires ensuring employee adherence to cybersecurity policies across all departments through education on threats, including virtual or physical training. Penetration and vulnerability testing, risk assessment, and closing regulatory gaps are also critical functions. The CISO will conduct weekly cybersecurity meetings and report on the cybersecurity status to the CEO and relevant committees, contributing to the overall cybersecurity strategy, policy, architecture, and risk management process.

Required Qualifications

• A Bachelor's degree in IT, Computer Science, or a related field of Information Security/Technology.
• A Grade Point Average (GPA) of preferably not less than out of 5 or out of 4.
• A minimum of 5 years of experience in GRC, IT/Security operations, SOC roles, or networking.
• Proficiency in Microsoft Word, Project, Excel, Access, and Visio.
• Fluency in the English language.

Essential Skills and Attributes

• Strong teamwork, critical thinking, and problem-solving abilities.
• Capability to communicate effectively and understand the needs of organizational stakeholders.
• A positive attitude and commitment to resolving technical problems.
• Ability to multitask and manage multiple priorities concurrently.
• Exceptional time-management skills and the capacity to work under pressure.
• The ability to collaborate within teams and manage multiple projects.
• A commitment to staying updated on information technology trends and security standards.
• Excellent business writing and technical documentation skills.

Technical Expertise

• Knowledge of Security Information and Event Management (SIEM) systems.
• Familiarity with programming languages such as SQL, C, C++, C#, Java, or PHP.
• Expertise in TCP/IP, computer networking, routing, and switching.
• Experience with penetration and vulnerability testing.
• Knowledge and hands-on experience in implementing and managing Firewalls and Intrusion Detection/Prevention Systems.
• Familiarity with Windows, UNIX, and Linux operating systems.
• Understanding of network protocols and packet analysis tools.
• Experience with anti-virus and anti-malware solutions.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia.