Head of Cyber Security - PayLink

Cybersecurity Governance & SAMA Compliance

Security Operations & Incident Response

Network, Application & Infrastructure Security

Vulnerability & Risk Management

Leadership & Security Awareness

Requirements

• Saudi nationality is mandatory.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• Professional cybersecurity certifications such as CISSP, CISM, CRISC, CEH, or equivalent are preferred..
• Minimum 5 years of relevant cybersecurity or information security experience within SAMA-licensed financial institutions, banks, payment service providers, or FinTech companies in Saudi Arabia.
• Proven hands-on experience implementing and maintaining controls aligned with the SAMA Cyber Security Framework (SAMA CSF).
• Demonstrated experience in Cybersecurity Governance, Risk Management, and Compliance (GRC), including risk assessments, regulatory audits, and remediation plans.
• Proven experience managing Security Operations (SOC), security monitoring, and cybersecurity incident response.
• Strong technical knowledge of Network Security, Application Security, Vulnerability Management, and Security Architecture.
• Hands-on experience with cybersecurity technologies such as SIEM, EDR/XDR, firewalls, IDS/IPS, and vulnerability scanning tools.
• Experience conducting or overseeing vulnerability assessments, penetration testing, and security remediation activities.
• Demonstrated experience leading cybersecurity projects, coordinating technical teams, or managing cybersecurity professionals.
• Strong communication, analytical, stakeholder management, and problem-solving skills.

Preferred Qualifications

• Professional cybersecurity certifications such as CISSP, CISM, CRISC, CEH, or equivalent are preferred..

Responsibilities

• Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with the SAMA Cyber Security Framework (CSF) and applicable regulatory requirements.
• Lead cybersecurity risk assessments, compliance reviews, internal audits, and remediation activities.
• Maintain cybersecurity governance documentation, risk registers, and compliance reporting.
• Identify regulatory compliance gaps and develop corrective action plans.
• Oversee daily security operations, threat monitoring, detection, and incident response activities.
• Manage security monitoring solutions, including SIEM, EDR/XDR, firewalls, and intrusion detection/prevention systems (IDS/IPS).
• Lead cybersecurity incident investigations, root cause analysis, and corrective actions.
• Develop, maintain, and test incident response procedures and escalation processes.
• Oversee network security controls, firewall configurations, access management, and infrastructure protection.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Ensure appropriate security controls are implemented across web applications, APIs, mobile applications, and payment platforms.
• Support secure architecture reviews, application security assessments, and penetration testing activities.
• Lead vulnerability assessments, security testing, and remediation tracking.
• Evaluate cybersecurity risks across applications, networks, cloud environments, and third-party integrations.
• Coordinate with IT and engineering teams to remediate critical vulnerabilities within defined timelines.
• Monitor emerging cyber threats and recommend preventive security measures.
• Lead cybersecurity initiatives, manage security projects, and mentor cybersecurity team members.
• Coordinate with IT, Engineering, Risk, Compliance, and business stakeholders.
• Develop and deliver cybersecurity awareness and training programs.
• Prepare cybersecurity KPIs, risk reports, and security posture updates for senior management.