Overview
Job Purpose : Lead and oversee all cybersecurity initiatives within the organization and externally for clients and projects. Ensure compliance with national and international regulations (CST-CRF, NCA, ISO 27001, GDPR), protect digital assets, and deliver expert-level cybersecurity services for internal environments and external enterprise / government clients.
Responsibilities
- Cybersecurity Governance & Compliance
Develop, implement, and enforce cybersecurity policies and risk frameworks.
Ensure full compliance with CST Cybersecurity Regulatory Framework (CRF), National Cybersecurity Authority (NCA) regulations, ISO 27001, GDPR, and industry-specific mandates.Lead internal and external cybersecurity audits and ensure continuous audit-readiness.Risk Management & Security AssessmentsConduct vulnerability assessments (VAPT), risk analyses, and threat modeling.
Oversee internal and external penetration testing programs.Produce risk reports with clear mitigation strategies.Security Operations Management (SOC)Supervise day-to-day SOC activities and lead threat detection and incident response.
Manage SIEM & SOAR platforms (e.g., Splunk, QRadar, Rapid7 InsightIDR).Lead cyber incident handling, forensic investigations, and post-incident reviews.Infrastructure & Cloud SecurityOversee security implementations across hybrid and multi-cloud environments (AWS, Azure, Oracle).
Ensure infrastructure hardening, secure configurations, and access controls.Collaborate with DevOps teams to embed security (DevSecOps) in development pipelines.External Cybersecurity Services (Projects & Clients)Provide cybersecurity expertise to external digital transformation and compliance projects.
Guide clients in meeting regulatory and operational security requirements.Lead delivery of security assessments, gap analysis, risk mitigation, and advisory.Security Awareness & TrainingDesign and manage awareness campaigns (via KnowBe4 or similar platforms).
Conduct training sessions for employees, clients, and executives.Promote a cybersecurity-first culture both internally and externally.Qualifications & Skills
ExperienceMinimum 9 years in cybersecurity (including hands-on with Palo Alto and Fortinet and more).
At least 3 years in a leadership or team lead capacity.Strong experience in delivering cybersecurity for enterprise and government projects.Certifications (Preferred) :CISSP, CISM
PCNSE (Palo Alto Certified)Fortinet NSE 4 / 5 / 6 / 7CEH, ISO 27001 Lead ImplementerAWS or Azure Security SpecialtyEducation :Bachelor’s in Cybersecurity, Computer Science, Network Engineering, or related field.
Languages :Fluent in English and Arabic
#J-18808-Ljbffr