Head of Cyber Security📣 Job Ad

About the Role

The University of Prince Mugrin (UPM), established in 2017 in Medina, Saudi Arabia, is seeking a qualified Saudi national to lead its Cybersecurity Unit within the IT Department. UPM is dedicated to providing advanced educational curricula and fostering student success. The Head of Cyber Security will be responsible for protecting the university's information assets, ensuring their confidentiality, integrity, and availability.

This leadership position involves developing and implementing comprehensive cybersecurity strategies, enforcing security policies, managing security incidents, and ensuring compliance with Saudi and international standards. The role requires building and managing a cybersecurity team, promoting security awareness, and staying informed about evolving cyber threats.

Key Responsibilities

• Develop and implement a university-wide cybersecurity strategy aligned with institutional objectives and relevant Saudi frameworks, including the National Cybersecurity Authority (NCA) and the Saudi Central Bank (SAMA).
• Conduct regular risk assessments to identify vulnerabilities and propose mitigation plans.
• Develop, update, and enforce information security policies, procedures, and standards across the university.
• Ensure compliance with local regulations, including NCA ECC, SACS, and SSOC.
• Monitor university systems for security breaches and investigate any violations.
• Lead and manage incident response and forensic investigations.
• Oversee threat intelligence gathering, vulnerability assessments, and penetration testing.
• Establish, mentor, and manage a dedicated cybersecurity team.
• Coordinate with IT infrastructure, academic, and administrative units to ensure secure operational practices.
• Promote cybersecurity awareness and provide training to university stakeholders.
• Support internal and external cybersecurity audits.
• Maintain documentation to demonstrate compliance with standards such as ISO 27001.
• Evaluate, recommend, and implement advanced cybersecurity tools and technologies.
• Lead cybersecurity projects, including the implementation of endpoint protection, firewalls, SIEM, and DLP systems.
• Maintain up-to-date knowledge of emerging threats, technologies, and regulatory changes.

Qualifications and Requirements

• A Bachelor's degree in Cyber Security, Computer Science, Information Security, or a closely related field is required; a Master's degree is preferred.
• Possession of recognized cybersecurity certifications such as CISSP, CISM, CEH, or equivalent is essential.
• A minimum of 5-7 years of progressive experience in cybersecurity roles, with at least 2 years in a leadership or management capacity.
• Demonstrated familiarity with NCA regulations and the SSCO framework.
• Experience working within academic institutions is considered a significant advantage.
• Strong knowledge of established cybersecurity frameworks and best practices.
• Proven leadership and team management capabilities.
• Expertise in incident response and risk management methodologies.
• Excellent communication and presentation skills.
• Fluency in both Arabic and English is mandatory.

Required Skills

• Cybersecurity Strategy Development and Implementation
• Risk Assessment and Management
• Information Security Policy Development and Enforcement
• Regulatory Compliance (NCA, SAMA, SACS, SSOC)
• Incident Response and Forensic Investigation
• Threat Intelligence and Vulnerability Assessment
• Penetration Testing
• Team Leadership and Management
• Secure Operations and System Hardening
• Security Awareness Training and Promotion
• Cybersecurity Audit Support
• Documentation and Compliance Management
• Evaluation and Implementation of Cybersecurity Tools and Technologies
• Project Management for Security Solutions (Endpoint Protection, Firewalls, SIEM, DLP)
• Staying Abreast of Emerging Threats and Regulatory Changes
• Strong Communication and Presentation Skills

Work Environment and Location

This is a full-time position based in Medina, Al Madinah, Saudi Arabia. The role involves leading the Cybersecurity Unit within the IT Department at the University of Prince Mugrin.

Application Process

Interested candidates are invited to apply online. The screening committee will contact shortlisted candidates for an interview.