Chief Information Security Officer (CISO)

About the Role

Jari Solutions is seeking a Chief Information Security Officer (CISO) to lead the organization's cybersecurity function. This full-time role is based in Riyadh, Saudi Arabia, and is responsible for protecting information assets, systems, and services while ensuring compliance with the Saudi Central Bank Cyber Security Framework (SAMA CSF). The CISO will oversee cybersecurity strategy, governance, risk management, regulatory compliance, and incident response, aiming to achieve and maintain a minimum targeted cybersecurity maturity level of Level 3.

Key Responsibilities

• Develop and implement cybersecurity strategy, policies, standards, and procedures in alignment with organizational objectives and regulatory requirements.
• Establish and maintain cybersecurity governance frameworks, define roles and responsibilities, and integrate security requirements into business projects and initiatives.
• Report cybersecurity risks, maturity levels, compliance status, and key performance indicators to senior management, the Cybersecurity Committee, and the Board of Directors.
• Develop and manage the cybersecurity budget, lead the cybersecurity team, and oversee employee development and awareness programs.
• Establish and oversee cybersecurity risk management processes, maintain the risk register, conduct risk assessments, and monitor mitigation plans.
• Assess cybersecurity risks associated with third parties, outsourced services, cloud environments, and significant technology changes.
• Ensure compliance with SAMA CSF and applicable regulatory requirements, and lead cybersecurity maturity assessments and internal and external audits.
• Manage corrective action plans, track audit and regulatory findings, and coordinate regulatory reporting with the Compliance Department.
• Oversee cybersecurity event monitoring, threat detection, vulnerability management, penetration testing, and security operations.
• Approve and lead cybersecurity incident response activities, ensure timely regulatory reporting, and implement lessons learned following incidents.
• Oversee cybersecurity controls across networks, applications, endpoints, identity management, and cloud services.

Organizational Structure and Independence

The CISO will maintain organizational independence from the Information Technology Department. This includes independent reporting lines, budget management, and employee performance evaluation, ensuring objective oversight of cybersecurity functions.

Qualifications and Experience

• A minimum of 5-10 years of relevant experience in information security leadership roles.
• Demonstrated expertise in cybersecurity strategy, governance, risk management, and incident response.
• In-depth knowledge and experience with the Saudi Central Bank Cyber Security Framework (SAMA CSF) and other applicable regulatory requirements.
• Proven ability to lead and manage cybersecurity teams and initiatives.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia. The role involves working within a dedicated cybersecurity function, collaborating with various departments to ensure comprehensive information security across the organization.

Application Process

Interested candidates are invited to apply for this position. Salary details will be discussed during the interview process.