Head of Cybersecurity Byteplus

About the Role

ByteDance is seeking a Head of Cybersecurity for Byteplus to join its team in Riyadh, Saudi Arabia. This full-time role is within the Cybersecurity team at Volcano Engine & BytePlus, a cloud service provider owned by ByteDance. The team is responsible for the security of all services, including IaaS, PaaS, and SaaS. The role involves designing and implementing robust security solutions for cloud environments, ensuring the protection of sensitive data and system resilience.

Role Context and Leadership

The Director of Information Security is responsible for the overall cybersecurity posture of the organization and for ensuring compliance with applicable cybersecurity laws, regulations, and frameworks, including the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC) within the Kingdom of Saudi Arabia (KSA). This position provides independent executive leadership and oversight across cybersecurity governance, risk management, and security operations. The role requires a pragmatic, business-oriented leader with strong expertise in cybersecurity, cloud security, and modern technology environments, capable of ensuring that cybersecurity risks are identified, managed, and reported in alignment with the organization's risk appetite and regulatory expectations. The Head of Cybersecurity will collaborate closely with senior executives to shape strategic outcomes, reduce risk exposure, and drive secure innovation across complex, interconnected ecosystems.

Key Responsibilities

• Establish and maintain enterprise-wide cybersecurity governance in line with SAMA CSF and NCA ECC requirements.
• Ensure clear ownership, accountability, and segregation of duties across cybersecurity functions.
• Advise executive management on cybersecurity risks, threats, and control effectiveness.
• Ensure cybersecurity considerations are embedded into corporate governance and enterprise risk management.
• Own and oversee the cybersecurity risk management framework.
• Ensure continuous compliance with applicable regulations and industry good practices.
• Act as the primary point of accountability for cybersecurity matters with regulators.
• Oversee cybersecurity operations including monitoring, detection, vulnerability management, IAM, and incident response.
• Ensure effective prevention, detection, response, and recovery capabilities.
• Govern the selection and operation of cybersecurity technologies.
• Ensure security by design across infrastructure, applications, cloud, and data platforms.
• Ensure effective incident response and cyber crisis management, leading executive coordination during material cybersecurity incidents.
• Ensure third-party cybersecurity risks are identified and managed, ensuring compliance of vendors with regulatory and contractual obligations.
• Establish and maintain a compliant cybersecurity operating model, developing national cybersecurity talent in alignment with Saudization.
• Define cybersecurity policies and standards, escalating risks and incidents to executive management, and approving or rejecting cybersecurity risk acceptances.

Experience and Qualifications

• 5-10 years of experience in cybersecurity, cloud security, and modern technology environments.
• Demonstrated expertise in establishing and maintaining enterprise-wide cybersecurity governance.
• Proven ability to manage cybersecurity risk frameworks and ensure regulatory compliance.
• Experience in overseeing cybersecurity operations and incident response.
• Strong understanding of applicable cybersecurity laws, regulations, and frameworks, including NCA ECC within KSA.

Work Environment

This is a full-time position located in Riyadh, Riyadh, Saudi Arabia. The role involves working within a forward-thinking security team dedicated to securing cloud infrastructure with cutting-edge technologies and best practices.