Cybersecurity Lead

Cybersecurity Lead Merit Incentives is looking for a qualified and hands-on Cybersecurity Lead to strengthen the security of its digital platforms, applications, cloud environment, internal systems, and client integrations across Saudi Arabia and international markets. Key Responsibilities • Identify and assess cybersecurity risks affecting the company’s platforms, applications, systems, employees, clients, and data. • Monitor and respond to cybersecurity incidents and coordinate the required containment and corrective actions. • Review the security of cloud environments, web and mobile applications, APIs, endpoints, networks, and access controls. • Conduct or coordinate vulnerability assessments, penetration testing, security reviews, and remediation activities. • Work with Technology, Product, and DevOps teams to incorporate security requirements into new systems, applications, and integrations. • Maintain cybersecurity policies, risk assessments, incident response procedures, and security reports. • Support applicable requirements such as ISO/IEC 27001, Saudi PDPL, NCA controls, PCI DSS, and client security assessments. • Promote cybersecurity awareness and provide management with clear recommendations on security risks and priorities. Requirements • Saudi National . • Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. • Minimum 5 years of relevant cybersecurity or information security experience. • Good practical knowledge of cloud security, application and API security, incident response, vulnerability management, endpoint security, and identity and access management. • Experience working with cloud-based platforms, web applications, APIs, or digital products. • Ability to investigate security issues, assess their business impact, and recommend practical solutions. • Strong communication, documentation, analytical, and stakeholder management skills. • Professional in Arabic and English. Preferred Qualifications • Experience in SaaS, fintech, payments, loyalty platforms, digital marketplaces, e-commerce, or enterprise technology environments. • Familiarity with ISO/IEC 27001, Saudi PDPL, NCA controls, and PCI DSS. • A relevant certification such as CISSP, CISM, CCSP, Security+, CySA+, CEH, ISO/IEC 27001, or a cloud security certification is preferred. The ideal candidate is expected to have broad cybersecurity knowledge and strong practical experience but is not required to be a specialist in every cybersecurity domain.

Saudi National. Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. Minimum 5 years of relevant cybersecurity or information security experience. Good practical knowledge of cloud security, application and API security, incident response, vulnerability management, endpoint security, and identity and access management. Experience working with cloud-based platforms, web applications, APIs, or digital products. Ability to investigate security issues, assess their business impact, and recommend practical solutions. Strong communication, documentation, analytical, and stakeholder management skills. Professional in Arabic and English.

Identify and assess cybersecurity risks affecting the company’s platforms, applications, systems, employees, clients, and data. Monitor and respond to cybersecurity incidents and coordinate the required containment and corrective actions. Review the security of cloud environments, web and mobile applications, APIs, endpoints, networks, and access controls. Conduct or coordinate vulnerability assessments, penetration testing, security reviews, and remediation activities. Work with Technology, Product, and DevOps teams to incorporate security requirements into new systems, applications, and integrations. Maintain cybersecurity policies, risk assessments, incident response procedures, and security reports. Support applicable requirements such as ISO/IEC 27001, Saudi PDPL, NCA controls, PCI DSS, and client security assessments. Promote cybersecurity awareness and provide management with clear recommendations on security risks and priorities.