Cybersecurity & DMO Director

About RUA RUA is a forward-thinking institution for cross-cultural arts education and creative innovation in the Middle East that fosters bold ideas that inspire progress and transform society by cultivating industry and academic collaboration and rethinking creative education, all while creating a space for global ideas to flourish in a culturally inspiring environment. • Our Vision • To be an inspiring beacon of knowledge for future generations, integrating culture and arts, empowering students to discover passions and develop talents while fostering creativity and cultural exchange. • Our Mission • To cultivate an innovative educational environment in culture and arts, delivering cutting-edge programs that foster cultural and artistic engagement, enriching both the Saudi and global communities. • Our Aspirations • The leading cultural university across the Middle East and North Africa. • Ranked among top 50 universities worldwide specializing in cultural education. • A global hub for cultural education and knowledge exchange. Job Summary Leads the university's cybersecurity and data governance function by defining and governing cybersecurity strategy, policies, controls, architecture, monitoring, incident response, and data governance to protect digital assets, manage cyber risk, and strengthen resilience. The role aligns cybersecurity and data priorities with institutional objectives, oversees governance frameworks for cyber and data management, and ensures compliance with NCA, NDMO and relevant Saudi cybersecurity and data governance frameworks. The role partners with D&T on technical implementation and remediation, and with Risk & BCM on enterprise risk and business continuity governance while fostering a security-aware, data-conscious culture across the university. General Accountabilities Strategy and Planning • Oversee the design and implementation of Cybersecurity & DMO department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy. • Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives. • Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives. Budget Management • Participate in Legal & GRC's budgeting process and provide input from Cybersecurity & DMO standpoint. • Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered. Policies, Processes, and Procedures • Oversee the design and set up of Cybersecurity & DMO department’s policies, processes and procedures to align with and exceed best-in class standards. • Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function. • Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed. People Management • Inspire the team and provide guidance, delegation and mentorship to create a performance-driven culture. • Ensure availability and qualification of team through recruitment, training, development and performance management. • Take actions to enhance employee engagement and motivation. • Provide clear top-down communication to employees and bottom-up feedback to senior management. Job Specific Accountabilities Cybersecurity Strategy, Governance, and Compliance • Lead the development and execution of the university's cybersecurity strategy, aligning priorities, investment, and risk posture with institutional objectives. • Establish governance structures, decision rights, and accountability forums to direct cybersecurity risk management and compliance. • Direct performance reporting on security posture, risk trends, and control effectiveness to support executive decision making. Cyber Risk, Third-Party Risk, and Secure-by-Design • Drive enterprise cyber risk assessment and treatment planning, ensuring material risks are owned, mitigated, and escalated appropriately. • Oversee establishment of requirements for third-party cybersecurity due diligence, contracting safeguards, and remediation oversight. • Ensure secure-by-design principles into projects, changes, and solution reviews are embdeeded so security requirements are addressed before implementation. • Coordinate with academic and administrative leaders to integrate cybersecurity priorities into business planning and operational decisions. Architecture, Identity, and Technical Control Oversight • Guide the evolution of the enterprise security architecture to strengthen resilience, standardization, and control effectiveness. • Direct identity access management (IAM) governance, including access standards, privileged access, authentication, and lifecycle controls. • Partner with Digital & Technology to align security design, remediation priorities, and hardening actions • Approve control expectations and review effectiveness across critical platforms, services, and data environments. Threat Intelligence, Monitoring, and Incident Response • Lead the threat intelligence program to anticipate emerging risks and shape proactive defense measures. • Set the direction for security monitoring, alert escalation, and response readiness across the university. • Direct major incident response, including containment, recovery, forensic coordination, and executive reporting. • Ensure crisis communication, regulatory notification, and lessons learned processes are tested and continuously improved. Data Management and Governance • Oversee the university-wide data governance framework in alignment with NDMO requirements. • Establish data ownership, decision rights, policies, and standards to enable trusted, compliant, and effective data use. • Direct data lifecycle governance across classification, access, retention, sharing, and disposal. • Champion data quality, privacy, and accountability practices that improve data maturity and value realization. Knowledge & Experience • 8+ years of progressive experience in cybersecurity, information security, technology risk, or a related field, including at least 4 years in a managerial or leadership role • Demonstrated experience defining security strategy, governance, architecture oversight, incident response, third-party cyber risk, IAM oversight, and regulatory compliance in a complex environment Education & Certifications • Bachelor degree in cybersecurity, information security, computer science, information systems, or related discipline is required • Master degree in cybersecurity, information security, information systems, computer science, business administration, or a related field is preferred • Professional certifications within cybersecurity fields are prefer. Internal Stakeholders • Risk & BCM • Compliance • Governance • Digital &

8+ years of progressive experience in cybersecurity, information security, technology risk, or a related field, including at least 4 years in a managerial or leadership role. Demonstrated experience defining security strategy, governance, architecture oversight, incident response, third-party cyber risk, IAM oversight, and regulatory compliance in a complex environment. Bachelor degree in cybersecurity, information security, computer science, information systems, or related discipline is required. Master degree in cybersecurity, information security, information systems, computer science, business administration, or a related field is preferred. Professional certifications within cybersecurity fields are prefer.

Leads the university's cybersecurity and data governance function by defining and governing cybersecurity strategy, policies, controls, architecture, monitoring, incident response, and data governance. Align cybersecurity and data priorities with institutional objectives, oversee governance frameworks for cyber and data management, and ensure compliance with NCA, NDMO and relevant Saudi cybersecurity and data governance frameworks. Partners with D&T on technical implementation and remediation, and with Risk & BCM on enterprise risk and business continuity governance while fostering a security-aware, data-conscious culture across the university. Oversee the design and implementation of Cybersecurity & DMO department’s strategic plan, objectives, and goals; direct and approve operational plans; develop performance indicators. Participate in budgeting; oversee policies, processes, and procedures; ensure efficiency, transparency and accountability. Manage people: recruitment, training, development, performance management, engagement. Lead cybersecurity strategy, governance and compliance; drive risk management; report on security posture and risk trends. Oversee third-party due diligence, secure-by-design integration; coordinate with academic and administrative leaders on priorities. Guide security architecture evolution; IAM governance; collaboration with Digital & Technology; review control effectiveness. Lead threat intelligence, monitoring, incident response; crisis communication and regulatory notification. Oversee data governance framework, data ownership, lifecycle governance, data quality, privacy, and accountability.