VaporVM

Cybersecurity Architect

Riyadh, Saudi ArabiaPosted yesterday

Salary
AED 15k–25k a month· est.
Job type
Full time
Level
Lead
Field
Engineering & Technology
Work mode
On site

About the role

We are seeking an experienced Cybersecurity Architect to lead security governance, compliance, risk management, and technical security initiatives across the organization. Key Responsibilities • Lead ISO 27001:2022 implementation, risk assessments, and compliance programs. • Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and related regulations. • Develop and maintain cybersecurity policies, standards, and procedures. • Conduct vendor security assessments and third-party risk reviews. • Perform penetration testing and vulnerability assessments for web, mobile, API, and IoT environments. • Manage SIEM, threat monitoring, incident response, and security operations. • Support secure architecture for cloud, applications, APIs, and IoT solutions. • Deliver cybersecurity awareness and secure coding training. • Prepare executive reports, security metrics, and risk dashboards. Requirements • Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field. • 8–12 years of experience in Cybersecurity, Security Architecture, or GRC. • Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK. • Hands-on experience in penetration testing, vulnerability management, and security operations. • Excellent communication and stakeholder management skills. • candidate has to be in KSA. Preferred Certifications • CISM • CISA • ISO 27001 Lead Auditor/Lead Implementer • CAP (Certified AppSec Practitioner) or equivalent

Requirements

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
  • 8–12 years of experience in Cybersecurity, Security Architecture, or GRC.
  • Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK.
  • Hands-on experience in penetration testing, vulnerability management, and security operations.
  • Excellent communication and stakeholder management skills.
  • candidate has to be in KSA.

Responsibilities

  • Lead ISO 27001:2022 implementation, risk assessments, and compliance programs.
  • Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and related regulations.
  • Develop and maintain cybersecurity policies, standards, and procedures.
  • Conduct vendor security assessments and third-party risk reviews.
  • Perform penetration testing and vulnerability assessments for web, mobile, API, and IoT environments.
  • Manage SIEM, threat monitoring, incident response, and security operations.
  • Support secure architecture for cloud, applications, APIs, and IoT solutions.
  • Deliver cybersecurity awareness and secure coding training.
  • Prepare executive reports, security metrics, and risk dashboards.

Skills

  • ISO 27001
  • OWASP Top 10
  • PTES
  • MITRE ATT&CK
  • penetration testing
  • vulnerability management
  • security operations
  • SIEM
  • incident response
  • secure coding
  • vendor security assessments
  • third-party risk reviews
  • cloud security
  • ISO 27001 Lead Auditor/Lead Implementer
  • CISM

Not sure you fit this role?

Upload your CV and see how you score against VaporVM and every other live job. It's free.

Get my free matches
Cyber Security jobs in Riyadh72 live roles, top employers and pay.See all →

Similar jobs in Saudi Arabia