Cybersecurity & DMO Director

About Riyadh University of Arts (RUA)

Riyadh University of Arts (جامعة الرياض للفنون) is an institution focused on cross-cultural arts education and creative innovation in the Middle East. RUA aims to foster ideas that inspire progress and transform society through industry and academic collaboration, rethinking creative education, and cultivating a space for global ideas within a culturally inspiring environment. The university's vision is to be a beacon of knowledge, integrating culture and arts, and empowering students while fostering creativity and cultural exchange. RUA aspires to be a leading cultural university in the MENA region, ranked among the top 50 universities worldwide specializing in cultural education, and a global hub for cultural education and knowledge exchange.

Role Summary

The Cybersecurity & DMO Director leads the university's cybersecurity and data governance functions. This role involves defining and governing cybersecurity strategy, policies, controls, architecture, monitoring, incident response, and data governance to protect digital assets, manage cyber risk, and strengthen resilience. The Director aligns cybersecurity and data priorities with institutional objectives, oversees governance frameworks for cyber and data management, and ensures compliance with NCA, NDMO, and relevant Saudi cybersecurity and data governance frameworks. This full-time position, based in Riyadh, requires over 10 years of experience and involves collaboration with Digital & Technology on technical implementation and remediation, and with Risk & BCM on enterprise risk and business continuity governance, while fostering a security-aware, data-conscious culture across the university.

Key Responsibilities

• Oversee the design and implementation of the Cybersecurity & DMO department’s strategic plan, objectives, and goals, ensuring alignment with RUA's strategy.
• Lead the development and execution of the university's cybersecurity strategy, aligning priorities, investment, and risk posture with institutional objectives.
• Establish governance structures, decision rights, and accountability forums to direct cybersecurity risk management and compliance.
• Drive enterprise cyber risk assessment and treatment planning, ensuring material risks are owned, mitigated, and escalated appropriately.
• Oversee the establishment of requirements for third-party cybersecurity due diligence, contracting safeguards, and remediation oversight.
• Guide the evolution of the enterprise security architecture to strengthen resilience, standardization, and control effectiveness.
• Direct identity access management (IAM) governance, including access standards, privileged access, authentication, and lifecycle controls.
• Lead the threat intelligence program to anticipate emerging risks and shape proactive defense measures.
• Oversee the university-wide data governance framework in alignment with NDMO requirements.
• Establish data ownership, decision rights, policies, and standards to enable trusted, compliant, and effective data use.
• Manage the department’s budget, ensuring effective utilization and accurate reporting.
• Inspire and provide guidance, delegation, and mentorship to the team, fostering a performance-driven culture.

Qualifications and Experience

• A minimum of 10 years of relevant experience in cybersecurity and data management.
• Demonstrated ability to develop and execute cybersecurity strategies and governance frameworks.
• Experience ensuring compliance with national cybersecurity and data governance frameworks, such as NCA and NDMO.
• Proven leadership skills in managing teams and fostering a security-aware culture.

Internal and External Stakeholders

The Cybersecurity & DMO Director will collaborate with various internal stakeholders including Risk & BCM, Compliance, Governance, Digital & Technology (D&T), Internal Audit, and Procurement. External engagement will involve the National Cybersecurity Authority (NCA), National Data Management Office (NDMO), External Auditors and Independent Assessors, Managed Security Service Providers and Technology Vendors, and Incident Response, Forensics, and Penetration Testing Specialists.

About Riyadh University of Arts

RUA is the first institution of its kind in the MENA region, serving as a center of creativity, knowledge, and innovation. It contributes to shaping Saudi Arabia’s cultural ecosystem and creative economy, driving the growth of the cultural sector in alignment with Saudi Vision 2030. Joining RUA offers an opportunity to contribute to a platform for discovery, talent nurturing, and a gateway for Saudi art and culture to the world.