Head of Security

Salla
Makkah
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceExperience: 12+ yearsEducation: bachelorsSkills: ["Executive communication","Risk translation","Leadership","Mentorship","Cross-functional collaboration"]

Own Salla’s enterprise security strategy across cloud, network, endpoint, physical security, and GRC, and lead the security organization end to end. Translate cyber and regulatory risk into executive and Board-ready language, set measurable KPIs and operating cadence, and drive cloud hardening, zero-trust IAM, security operations, incident response, and vendor risk. Lead audits and certifications (e.g., ISO/IEC 27001, SOC 2, PCI DSS) to support Saudi regulatory readiness and Tadawul listing.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Salla
Salla
1 month ago

Head of Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own Salla’s enterprise security strategy across cloud, network, endpoint, physical security, and GRC, and lead the security organization end to end. Translate cyber and regulatory risk into executive and Board-ready language, set measurable KPIs and operating cadence, and drive cloud hardening, zero-trust IAM, security operations, incident response, and vendor risk. Lead audits and certifications (e.g., ISO/IEC 27001, SOC 2, PCI DSS) to support Saudi regulatory readiness and Tadawul listing.
Location: Makkah
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Sr. Director level

Key Responsibilities

  • •Own and evolve the enterprise security strategy, roadmap, and operating model across cloud, network, endpoint, physical security, and GRC, aligned to Salla’s growth and public-listing readiness.
  • •Lead cloud security (landing-zone hardening, segmentation, secrets management, workload protection), govern Infrastructure-as-Code security, container/Kubernetes security, and CI/CD pipeline integrity.
  • •Own network security architecture (edge protection, DDoS mitigation, WAF, segmentation, zero-trust network access) and govern secure connectivity including private connectivity, VPN, and DNS security.
  • •Lead endpoint security (EDR/XDR, device hardening, MDM, disk encryption) and run continuous vulnerability/patch management with remediation SLAs.
  • •Build and run SecOps and incident response (SIEM, detection engineering, threat intelligence, monitoring), own incident lifecycle and exercises, and lead GRC programs including audits and compliance for ISO/IEC 27001, SOC 2, PCI DSS, and Saudi regulatory requirements.

Key Requirements

  • •12+ years in information and cyber security, including 5+ years in senior security leadership (Head of Security, Director, or CISO-track) at a SaaS, fintech, or e-commerce organization.
  • •Ownership of security across cloud, network, endpoint, physical, and GRC domains.
  • •Hands-on and architectural knowledge of cloud security (AWS strongly preferred), including Kubernetes and modern CI/CD.
  • •Proven experience building and operating security operations and incident response at scale.
  • •Experience with GRC across ISO 27001, PCI DSS, and relevant Saudi regulatory frameworks (NCA ECC/CCC, PDPL/SDAIA; SAMA CSF a plus), plus Board-level executive communication.
Experience:12+ yearsFintechSaaSE-commerce
Education:Bachelor's
Skills:Executive communicationRisk translationLeadershipMentorshipCross-functional collaboration
Certifications:ISO/IEC 27001SOC 2PCI DSSNCA Essential Cybersecurity Controls
Tech Stack:AWSKubernetesCI/CDSIEMEDRXDRVPNDNSZero-trustInfrastructure-as-CodeCloud security posture managementDDoS mitigationWeb Application FirewallCCTVCIS benchmarksSOC 2ISO/IEC 27001PCI DSSISO 27001NCA Essential Cybersecurity Controls

Eligibility

Nationality:Saudi National

Company Brief

Salla
Provides an e-commerce platform that helps merchants create, manage, and grow online stores. The product includes storefront setup, payments, order management, shipping integrations, and tools for sales and customer engagement.
Industry: SaaS
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: Riyadh, Saudi Arabia
Founded: 2016
WebsiteLinkedIn