VaporVM

Cybersecurity Architect

Riyadh, Saudi ArabiaPosted yesterday

Apply link checked today

Salary
AED 6k–10k a month· est.
Job type
Full time
Level
Lead
Field
Engineering & Technology
Work mode
On site

About the role

We are seeking an experienced Cybersecurity Architect to lead security governance, compliance, risk management, and technical security initiatives across the organization. Key Responsibilities • Lead ISO 27001:2022 implementation, risk assessments, and compliance programs. • Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and related regulations. • Develop and maintain cybersecurity policies, standards, and procedures. • Conduct vendor security assessments and third-party risk reviews. • Perform penetration testing and vulnerability assessments for web, mobile, API, and IoT environments. • Manage SIEM, threat monitoring, incident response, and security operations. • Support secure architecture for cloud, applications, APIs, and IoT solutions. • Deliver cybersecurity awareness and secure coding training. • Prepare executive reports, security metrics, and risk dashboards. Requirements • Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field. • 8–12 years of experience in Cybersecurity, Security Architecture, or GRC. • Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK. • Hands-on experience in penetration testing, vulnerability management, and security operations. • Excellent communication and stakeholder management skills. • candidate has to be in KSA. Preferred Certifications • CISM • CISA • ISO 27001 Lead Auditor/Lead Implementer • CAP (Certified AppSec Practitioner) or equivalent

Requirements

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
  • 8–12 years of experience in Cybersecurity, Security Architecture, or GRC.
  • Strong expertise in ISO 27001, OWASP Top 10, PTES, and MITRE ATT&CK.
  • Hands-on experience in penetration testing, vulnerability management, and security operations.
  • Excellent communication and stakeholder management skills.
  • candidate has to be in KSA.

Responsibilities

  • Lead ISO 27001:2022 implementation, risk assessments, and compliance programs.
  • Ensure compliance with SAMA-CSF, NCA, PDPL, CST CRF, and related regulations.
  • Develop and maintain cybersecurity policies, standards, and procedures.
  • Conduct vendor security assessments and third-party risk reviews.
  • Perform penetration testing and vulnerability assessments for web, mobile, API, and IoT environments.
  • Manage SIEM, threat monitoring, incident response, and security operations.
  • Support secure architecture for cloud, applications, APIs, and IoT solutions.
  • Deliver cybersecurity awareness and secure coding training.
  • Prepare executive reports, security metrics, and risk dashboards.

Skills

  • ISO 27001
  • OWASP Top 10
  • PTES
  • MITRE ATT&CK
  • penetration testing
  • vulnerability management
  • security operations
  • SIEM
  • incident response
  • cloud security
  • secure coding
  • vendor risk assessments
  • GRC

Not sure you fit this role?

Upload your CV and see how you score against VaporVM and every other live job. It's free.

Get my free matches
Cyber Security jobs in Riyadh81 live roles, top employers and pay.See all →

Similar jobs in Saudi Arabia