Cyber Security Specialist

Soar is a global fintech startup that specializes in financing and investment. Currently headquartered in Saudi Arabia, Soar is growing throughout the region with a mission to help people achieve their financial goals with innovative financial and property investment solutions and tools through its multi-purpose platform, designed to offer a simple and seamless user experience.

Role Summary

We are seeking a dynamic Cybersecurity Specialist to be a foundational member of our organization's cybersecurity program, with a strong focus on Governance, Risk, and Compliance (GRC). This individual will be responsible for ensuring adherence to regulatory mandates by conducting comprehensive cybersecurity risk assessments, performing robust third‑party security evaluations, and executing detailed gap assessments against our current controls. This role will work closely with the GRC Head, providing critical support by tracking and monitoring all compliance checks, remediation tasks, and implementation projects. The ideal candidate will be instrumental in helping the organization achieve and maintain alignment with key regulatory requirements and standards within KSA, specifically the SAMA Cybersecurity Framework and the Personal Data Protection Law (PDPL).

Key Responsibilities

• Ensure the effective implementation and operationalization of established cybersecurity governance policies, standards, and frameworks.
• Conduct continuous monitoring to validate organization‑wide adherence to established cybersecurity policies and procedures.
• Develop and deliver periodic reports to the CISO and GRC head detailing key governance metrics and compliance status.
• Execute comprehensive cybersecurity risk assessments to systematically identify, analyze, and evaluate organizational vulnerabilities and threats.
• Collaborate with cross‑functional stakeholders to facilitate risk prioritization and oversee the implementation of corresponding mitigation strategies.
• Manage and ensure the continuous maintenance, accuracy, and currency of the organization's cybersecurity risk register.
• Validate organizational compliance with all applicable legal and regulatory requirements within the Kingdom of Saudi Arabia, including SAMA, PDPL, and the NCA.

Qualifications & Skills

Communication : Excellent verbal and written communication skills in English to effectively liaise with technical teams, senior management, and the CISO.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Engineering and Information Technology

#J-18808-Ljbffr