Head of Cybersecurity, Byteplus - Riyadh

Role overview

Governance, risk and operations

• Establish enterprise governance aligned with SAMA CSF and NCA ECC; clarify accountability and advise executives on risks and controls.
• Own cybersecurity risk management, compliance, audit remediation, and regulator engagement.
• Oversee monitoring, detection, vulnerability management, IAM, incident response, and cybersecurity technology selection.
• Ensure security by design across infrastructure, applications, cloud, and data platforms.
• Lead incident and crisis coordination, recovery alignment, and post-incident reviews.
• Manage third-party risks, vendor obligations, and outsourced security services.
• Develop cybersecurity talent and awareness, maintain the operating model, and set policies and risk decision rights.

Minimum qualifications

• Bachelor's degree in computer science, computer engineering, information technology, or a related field.
• 5+ years of relevant experience in security strategy, cybersecurity governance, risk management, or related areas.
• Familiarity with OWASP, SANS CWE Top 25, ISO 27001, PCI DSS, NIST, and SAMA/NCA frameworks.
• Proven executive cybersecurity leadership, stakeholder engagement, and ability to explain risks in business terms.
• Demonstrated ability to build high-performing cybersecurity teams and national talent.

Preferred qualifications

• Sound decision-making and crisis leadership during significant cybersecurity incidents.
• End-to-end security design and strategic roadmap experience for cloud security products and services.
• CISSP, CISM, CCSP, or GIAC certifications.

About ByteDance