Cybersecurity Architect (Immediate joiner)📣 Job Ad

About the Role

VaporVM is seeking an experienced Cybersecurity Architect to join its team in Riyadh, Saudi Arabia. This role is responsible for enhancing the organization's security posture through governance, compliance, risk management, and technical security initiatives. The ideal candidate will be an immediate joiner.

Key Responsibilities

• Lead the implementation of ISO 27001:2022 standards, including risk assessments and compliance programs.
• Ensure adherence to Saudi Arabian regulations and frameworks such as SAMA-CSF, NCA, PDPL, and CST CRF.
• Develop, maintain, and update cybersecurity policies, standards, and procedures.
• Conduct security assessments for vendors and perform third-party risk reviews.
• Execute penetration testing and vulnerability assessments across web, mobile, API, and IoT environments.
• Manage Security Information and Event Management (SIEM) systems, threat monitoring, incident response, and security operations.
• Provide architectural guidance for the secure design of cloud environments, applications, APIs, and IoT solutions.
• Deliver cybersecurity awareness training to staff and secure coding training to development teams.
• Prepare executive reports, security metrics, and risk dashboards for senior management.

Qualifications and Requirements

• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
• A minimum of 8 to 12 years of progressive experience in Cybersecurity, with a focus on Security Architecture or Governance, Risk, and Compliance (GRC).
• Demonstrated expertise in cybersecurity frameworks and methodologies including ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK.
• Hands-on experience in penetration testing, vulnerability management, and security operations.
• Excellent communication skills, with the ability to articulate complex security concepts to diverse stakeholders.
• Proven stakeholder management skills, fostering collaboration across departments.
• Must currently be located within the Kingdom of Saudi Arabia.

Required Skills

• ISO 27001
• OWASP Top 10
• PTES (Penetration Testing Execution Standard)
• MITRE ATT&CK framework
• Penetration Testing
• Vulnerability Management
• Security Operations
• Communication
• Stakeholder Management

Additional Information

Preferred certifications include CISM, CISA, ISO 27001 Lead Auditor/Lead Implementer, CAP (Certified AppSec Practitioner), or equivalent. The role is full-time and based in Riyadh, Saudi Arabia. Experience required is between 5-10 years, with specific requirements indicating 8-12 years of experience.