Cybersecurity and Compliance Executive Maternity Cover

About the Role

Tahaluf is seeking a Cybersecurity and Compliance Executive for a 6-month contract position based in Riyadh, Saudi Arabia. This role involves translating KSA-specific regulations, such as those from NCA, SAMA, and PDPL, into actionable policies. The executive will collaborate with technology teams to integrate security controls and ensure that all events and system launches adhere to high standards of data protection, risk management, and regulatory compliance.

Key Responsibilities

• Lead PDPL data-privacy readiness and coordinate with Legal for necessary approvals.
• Maintain documentation for PDPL, SAMA CSF, and NCA control checklists.
• Ensure compliance with the SAMA Cybersecurity Framework, NCA controls, and CITC guidelines.
• Prepare and submit required security reports for each event to the Saudi National Cybersecurity Authority (NCA).
• Maintain audit trails and evidence packs to demonstrate compliance for internal and external audits, NCA, and other regulatory controls.
• Conduct scheduled vulnerability assessments across all digital platforms (web, mobile, API).
• Collaborate with platform owners, development, and operations teams to prioritize, track, and verify remediation of identified findings.
• Oversee daily Security Information and Event Management (SIEM) monitoring, triage alerts, and threat intelligence feeds.
• Develop, test, and execute Incident Response Plans (IRP) and conduct tabletop exercises.
• Coordinate breach investigations and post-incident reports.
• Advise on secure network, cloud (AWS/Azure), and identity architectures.
• Specify, deploy, and tune security tools, including firewalls, IDS/IPS, DLP, EDR, and vulnerability scanners.
• Create and update necessary policy documents and Standard Operating Procedures.
• Liaise with platform and tool providers to schedule maintenance windows or updates.
• Verify the delivery of agreed security reporting, such as monthly vulnerability reports.
• Develop and deliver security awareness and phishing-simulation programs for all employees and event staff.
• Measure program effectiveness and iterate to enhance security culture.
• Produce monthly dashboards on security posture, compliance status, and incident metrics for leadership.
• Liaise with internal teams (Tech, Legal, Operations) and external vendors to ensure consistent security integration.

Qualifications and Experience

• 2-5 years of experience in cybersecurity and compliance roles.
• Demonstrated understanding of KSA-specific regulations including NCA, SAMA, and PDPL.
• Experience with vulnerability assessments and risk management.
• Proficiency in security operations and incident response planning.
• Familiarity with secure network, cloud (AWS/Azure), and identity architectures.
• Experience with security tools such as firewalls, IDS/IPS, DLP, EDR, and vulnerability scanners.

Work Type and Location

This is a contract position for a duration of 6 months, with an ideal start date at the end of October. The role is based in Riyadh, Riyadh, Saudi Arabia.

Commitment to Diversity

Tahaluf values diversity and welcomes applicants from all backgrounds and circumstances. Hiring decisions are based on relevant qualifications and merit. We are committed to providing a disability-friendly environment. If you require any support or adjustments to participate in our interview or selection processes, please inform us.