Cybersecurity Lead

About Merit Incentives

Merit Incentives is seeking a Cybersecurity Lead to enhance the security posture of its digital platforms, applications, cloud environment, internal systems, and client integrations. This full-time position is based in Riyadh, Saudi Arabia, and focuses on strengthening security across Saudi Arabia and international markets.

Role Overview

The Cybersecurity Lead will be responsible for identifying, assessing, and mitigating cybersecurity risks. This role involves hands-on security management, incident response coordination, and collaboration with technology teams to integrate security requirements into new developments. The ideal candidate will possess broad cybersecurity knowledge and strong practical experience, without necessarily being a specialist in every domain.

Key Responsibilities

• Identify and assess cybersecurity risks impacting the company’s platforms, applications, systems, employees, clients, and data.
• Monitor and respond to cybersecurity incidents, coordinating containment and corrective actions.
• Review the security of cloud environments, web and mobile applications, APIs, endpoints, networks, and access controls.
• Conduct or coordinate vulnerability assessments, penetration testing, security reviews, and remediation activities.
• Collaborate with Technology, Product, and DevOps teams to integrate security requirements into new systems, applications, and integrations.
• Maintain cybersecurity policies, risk assessments, incident response procedures, and security reports.
• Support compliance with applicable requirements such as ISO/IEC 27001, Saudi PDPL, NCA controls, and PCI DSS, as well as client security assessments.
• Promote cybersecurity awareness and provide clear recommendations on security risks and priorities to management.

Qualifications and Requirements

• Saudi National.
• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Minimum of 5 years of relevant cybersecurity or information security experience.
• Practical knowledge of cloud security, application and API security, incident response, vulnerability management, endpoint security, and identity and access management.
• Experience working with cloud-based platforms, web applications, APIs, or digital products.
• Ability to investigate security issues, assess business impact, and recommend practical solutions.
• Strong communication, documentation, analytical, and stakeholder management skills.
• Professional proficiency in both Arabic and English.

Preferred Qualifications

• Experience in SaaS, fintech, payments, loyalty platforms, digital marketplaces, e-commerce, or enterprise technology environments.
• Familiarity with ISO/IEC 27001, Saudi PDPL, NCA controls, and PCI DSS.
• Relevant certifications such as CISSP, CISM, CCSP, Security+, CySA+, CEH, ISO/IEC 27001, or a cloud security certification.

Location

This position is based in Riyadh, Saudi Arabia.