Associate Director - Cybersecurity Risk and Compliance

Qiddiya
Riyadh
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 10-12 yearsEducation: bachelorsSkills: ["Risk governance","Stakeholder coordination","Documentation","Audit readiness","Compliance awareness"]

Lead cybersecurity risk assessments and compliance assurance across both IT and OT environments, including OT-specific reviews for assets such as PLCs, HMIs, RTUs, and engineering systems. Own the cybersecurity risk and compliance registers, validate controls and configuration baselines, and coordinate risk reviews for major IT/OT changes, incidents, and regulatory updates. Serve as the primary interface for external audits and regulatory inspections, and govern third-party cybersecurity risk across suppliers using standards like NCA OTCC and IEC 62443.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Qiddiya
Qiddiya
4 days ago

Associate Director - Cybersecurity Risk and Compliance

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Lead cybersecurity risk assessments and compliance assurance across both IT and OT environments, including OT-specific reviews for assets such as PLCs, HMIs, RTUs, and engineering systems. Own the cybersecurity risk and compliance registers, validate controls and configuration baselines, and coordinate risk reviews for major IT/OT changes, incidents, and regulatory updates. Serve as the primary interface for external audits and regulatory inspections, and govern third-party cybersecurity risk across suppliers using standards like NCA OTCC and IEC 62443.
Location: Riyadh
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Director level

Key Responsibilities

  • •Conduct periodic and ad hoc cybersecurity risk assessments across IT and OT environments, including OT-specific assessments for PLCs, HMIs, RTUs, and engineering systems.
  • •Maintain the cybersecurity risk register (including OT-specific entries) and drive treatment actions by tracking likelihood/impact, ownership, status, and escalation of overdue/high-priority items.
  • •Coordinate internal cybersecurity compliance assessments across domains, serve as the lead interface for external audits and regulatory inspections, and validate remediation effectiveness before closure.
  • •Maintain and govern compliance registers mapping regulatory requirements to policies, controls, responsible teams, and evidence sources across IT and OT.
  • •Govern third-party cybersecurity risk by standardizing assessment processes, conducting third-party assessments across IT/OT suppliers, and tracking findings through acceptance or compensating controls.

Key Requirements

  • •Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
  • •Master’s degree is preferred.
  • •10–12+ years of cybersecurity experience.
  • •Strong experience in cybersecurity risk management, compliance, assessments, and assurance.
  • •Experience coordinating cybersecurity assessments and assurance activities across IT and OT environments.
Experience:10-12 yearsCybersecurityIT/OT securityGovernanceComplianceOT cybersecurity
Education:Bachelor's
Skills:Risk governanceStakeholder coordinationDocumentationAudit readinessCompliance awareness
Tech Stack:PLCHMIRTUSCADADCSOT assetsZoningSegmentationFirewall rulesFirmware versionsNCA OTCCIEC 62443Cybersecurity risk registerCompliance register

Company Brief

Qiddiya
Developing Qiddiya City, a PIF-backed giga-project near Riyadh delivering theme parks, sports venues, cultural attractions, hospitality, and entertainment ecosystems to drive tourism, jobs, and economic diversification under Saudi Vision 2030.
Industry: Real Estate Development
Company Size: Enterprise (1,001+ employees)
Growth: Government & Public Sector
Funding: Government Funded
Headquarters: Riyadh, Saudi Arabia
Founded: 2018
Glassdoor
Glassdoor: 4.3
WebsiteLinkedInGlassdoor