Cybersecurity Lead

About the Role

NextEra is seeking a Cybersecurity Lead to join our team in Riyadh, Saudi Arabia. This full-time position reports directly to the CISO and is responsible for leading the execution of the organization’s cybersecurity, information security, governance, risk, and compliance (GRC) agenda within Saudi Arabia. The role focuses on strengthening the company's security posture and ensuring adherence to regulatory and enterprise compliance standards.

Key Responsibilities

• Act as the primary point of contact for Information Security, Cybersecurity, and GRC initiatives in Saudi Arabia, under the CISO's direction.
• Lead the implementation and continuous improvement of the Cybersecurity, Information Security, and GRC functions.
• Ensure alignment with Saudi regulatory requirements, enterprise security standards, and client security needs.
• Manage cybersecurity risk assessments, risk acceptance, mitigation strategies, vulnerability management, and security assurance activities.
• Identify, assess, quantify, report, communicate, and monitor security gaps and their associated remediation plans.
• Lead internal, statutory, client, and certification audits from an Information Security and IT perspective.
• Manage security certifications and compliance programs.
• Review and strengthen security policies, procedures, controls, and the Security Assurance Framework.
• Develop cybersecurity and GRC dashboards, KPIs, metrics, and management reports for the CISO and leadership.
• Support the CISO with cybersecurity, GRC, and IT risk management updates and presentations.
• Demonstrate security compliance and control effectiveness to internal stakeholders, clients, and auditors.
• Participate in client discussions, RFIs, RFPs, and proposals related to cybersecurity and information security.
• Coordinate with enterprise and local teams to ensure consistency in security policies and procedures.
• Support budget planning and manage cybersecurity-related PR/PO processes.

Experience and Qualifications

• Minimum of 10 years of progressive experience in Information Security, Cybersecurity, GRC, or Risk Management.
• Minimum of 5 years of leadership experience.
• Proven experience establishing or leading Information Security/Cybersecurity functions.
• Strong knowledge of Saudi Arabian cybersecurity regulations and compliance requirements.
• Experience with security audits, certifications, risk management, and regulatory compliance.
• Hands-on experience in risk assessment, vulnerability management, security assurance, risk acceptance, and mitigation planning.
• Experience working with CISO/CIO and other senior leadership stakeholders.
• Strong client-facing experience, including security presentations, RFIs, RFPs, and audits.
• Experience developing cybersecurity dashboards, metrics, and executive-level reporting.
• Knowledge of security budget management and PR/PO processes.
• Excellent stakeholder management, presentation, and communication skills.

Education

• Required: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Preferred: Master’s degree in Information Security, Business Administration, Technology Management, or a related field.

Work Environment

This role is based in Riyadh, Saudi Arabia, and operates on a full-time schedule. The Cybersecurity Lead will work closely with business, technology, and leadership stakeholders to manage cyber risks and audits.

Application Process

Qualified candidates are invited to apply. Salary details will be discussed during the interview process.