Cybersecurity and Compliance Executive 6 month Maternity Cover

As our Cybersecurity & Compliance Executive youll translate KSA-specific regulations (NCA SAMA PDPL) into actionable policies partner with Tech teams to embed security controls and ensure every event and system launch meets the highest standards of data protection risk management and regulatory adherence.

Key Responsibilities

Regulatory Compliance

• Lead PDPL data-privacy readiness; coordinate with Legal for approvals.
• Help maintain documentation for PDPL SAMA CSF and NCA control checklists.
• Manage compliance with SAMA Cybersecurity Framework NCA controls and CITC guidelines.
• Prepare and share required security reports for each event with the Saudi National Cybersecurity Authority (NCA).
• Maintain audit trails and evidence packs to demonstrate compliance with internal and external audits NCA and other regulatory controls.

Vulnerability and Risk Management

• Run scheduled vulnerability assessments across all digital platforms (web mobile API).
• Work closely with platform owners development and ops teams to prioritize track and verify remediation of identified findings.

Security Operations & Incident Response

• Oversee daily Security Information and Event Management monitoring triage alerts and threat intelligence feeds.
• Develop test and execute Incident Response Plans (IRP) and run tabletop exercises.
• Coordinate breach investigations and post-incident reports.

Technical Architecture & Controls

• Advise on secure network cloud (AWS/Azure) and identity architectures.
• Specify deploy and tune security tools: firewalls IDS/IPS DLP EDR vulnerability scanners.

Policy & Process Maintenance

• Create and Update necessary policy documents and Standard Operating Procedures.

Vendor & Tool Coordination

• Liaise with platform and tool providers to schedule maintenance windows or updates.
• Verify delivery of agreed security reporting (e.g. monthly vulnerability reports).

Training & Awareness

• Build and deliver security awareness and phishing-simulation programs for all employees and event staff.
• Measure program effectiveness and iterate to drive cultural lift.

Reporting Management

• Produce monthly dashboards on security posture compliance status and incident metrics for leadership.
• Liaise with internal teams (Tech Legal Operations) and external vendors to ensure consistent security integration.

Qualifications :

• Bachelors degree in Information Security Computer Science or related discipline.

Experience

• 3-5 years of experience in cybersecurity roles with a minimum of 2 years of closely operating within the Saudi regulatory environment.
• Deep knowledge of SAMA CSF NCA controls PDPL requirements and KSA data-privacy laws.
• Basic project coordination skills and the ability to manage multiple tasks while maintaining attention to detail.
• Comfortable adapting to a fast-paced environment and adjusting to changing priorities.
• Good communication and interpersonal skills able to work effectively with cross-functional teams.
• Familiarity with project management tools and experience with event tech platforms is a plus.
• Experience working in the events and/or media industry is a plus.

Additional Information :

Please note this is a temporary 6 month role with an ideal start date at the end of October.

We dont just accept difference we celebrate it.  We welcome applicants from all backgrounds and circumstances and base hiring decisions on relevant qualifications and merit.  We are proud to provide a disability-friendly environment. If you require any support or adjustments to participate in our interview or selection processes please let us know.

Remote Work :

No

Employment Type :

Contract