Current jobs related to Cybersecurity Risk Lead - Riyadh, Ar Riyāḑ - HALA

  • Cybersecurity Risk

    3 days ago


    Riyadh, Ar Riyāḑ, Saudi Arabia SiFi Full time

    This is a remote position.***About SiFi: SiFi is a rapidly growing B2B Fin-Tech company transforming expense management for businesses in Saudi Arabia. As a licensed EMI from the Saudi Central Bank, we empower companies with innovative tools to simplify finance management.***Role Overview We are seeking a highly experienced Cybersecurity Risk & Architecture...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Salt Full time

    Cybersecurity Risk Management SpecialistRiyadhSaudi Nationals only24-month projectDescriptionMaintain and execute cybersecurity risk management activities across the organisation, including risk assessment, risk analysis and prioritisation, and risk treatment and mitigation. Own risk-tracking and reporting activities, maintain cybersecurity governance...


  • Riyadh, Ar Riyāḑ, Saudi Arabia atmaal Full time

    GRC SpecialistWe are seeking an experienced GRC Specialist to join our Cybersecurity Department, reporting to the Cybersecurity GRC Director. This is a replacement position.Key Responsibilities:• Ensure compliance with international cybersecurity frameworks and standards• Develop and maintain cybersecurity policies, procedures, and processes• Support...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Raqmiyat Full time

    We are looking for an experienced CISO to lead the organization's cybersecurity strategy, governance, operations, and compliance. The role will ensure protection of information assets, alignment with regulatory frameworks, and continuous improvement of the cybersecurity posture.Key ResponsibilitiesDevelop and maintain the cybersecurity strategy, policies,...

  • Cybersecurity OT

    1 week ago


    Riyadh, Ar Riyāḑ, Saudi Arabia SITE سايت Full time

    Job Role Profile:We are seeking a skilled Cybersecurity Specialist responsible for safeguarding Industrial Control Systems (ICS) and Operational Technology (OT) environments. The role focuses on identifying, assessing, and mitigating cybersecurity risks, ensuring compliance with industry regulations, and supporting the resilience and security of critical...


  • Riyadh, Ar Riyāḑ, Saudi Arabia geidea Full time

    Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovationGeidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative & entrepreneurial talent in the marketOur solutions give any business the chance to get ahead and reach for more no matter...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Intrinsic Security Full time

    Cybersecurity Governance Officer (Profile 1)Position Level:Senior SpecialistRole OverviewResponsible for establishing, maintaining, and overseeing the cybersecurity governance framework, ensuring alignment with national regulations, international standards, and organizational objectives.Key ResponsibilitiesDevelop, implement, and continuously improve the...


  • Riyadh, Ar Riyāḑ, Saudi Arabia 2P Perfect Presentation Full time

    The Cybersecurity GRC Senior Specialist is responsible for establishing and managing the organization's cybersecurity governance framework, ensuring adherence to regulatory compliance, and mitigating risk. This role involves leading a team to perform cybersecurity audits, risk assessments, and compliance reviews while ensuring alignment with KSA-specific...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Boston Consulting Group Full time

    Who We ArePlatinion Profile:Join BCG Platinion's Riyadh office in tackling the core IT issues of leading global companies. You'll deploy customized platforms, architectures, strategies, and organizations to unlock the digital potential of our clients and drive real innovation.As a seamlessly integrated part of the BCG network, we provide consulting services...


  • Riyadh, Ar Riyāḑ, Saudi Arabia Boston Consulting Group (BCG) Full time

    Who We ArePlatinion ProfileJoin BCG Platinion's Riyadh office in tackling the core IT issues of leading global companies. You'll deploy customized platforms, architectures, strategies, and organizations to unlock the digital potential of our clients and drive real innovation.As a seamlessly integrated part of the BCG network, we provide consulting services...

Cybersecurity Risk Lead

2 weeks ago


Riyadh, Ar Riyāḑ, Saudi Arabia HALA Full time

Who Are We

HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools.

HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments, HALA Cashier and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations.

Founded in 2017, HALA is currently duly licensed by the Saudi Arabian Central Bank as well as the Financials Services Regulatory Authority (FSRA) in Abu Dhabi Global Market.

Job Summary: 

The Cybersecurity Risk Lead's primary function is to develop and govern the overarching risk management methodology to systematically identify, assess, and prioritize cybersecurity threats, vulnerabilities, and potential business impacts; this includes maintaining a corporate risk register, defining the acceptable risk appetite with senior leadership, monitoring the effectiveness of security controls against compliance frameworks (like CSF or NCA), and translating complex technical risk scenarios into clear, actionable business language for executive reporting and resource allocation to ensure risk mitigation aligns with organizational objectives and regulatory requirements.

Tasks & Responsibilities:

Lead HALA's cyber risk management program aligned to SAMA CSF and NCA ECC-2. 

Own risk assessments, control testing, risk registers, and treatment plans across tech, product, cloud, and third parties.

Define cyber risk appetite, KRIs/KPIs, and executive dashboards (residual risk, control maturity, audit findings).

Support regulatory exams, internal/external audits, and policy/standard lifecycle.

Oversee third-party cyber risk for vendors, PSPs, and critical fintech partners.

Qualifications: 

Bachelor's in Cybersecurity, IT, Business, or related field.

8–12+ years in cyber GRC/risk, including financial-sector exposure preferred.

Strong grasp of risk frameworks (ISO 27001, NIST CSF/ and mapping to SAMA/NCA controls.

Excellent audit, documentation, and stakeholder skills.

Certs preferred: CISSP-ISSMP, CISM, CRISC, ISO 27001 LA/LI.

What We Offer You
We believe you will love working at HALA
  • We have an inclusive and diverse culture that encourages innovation and flexibility in remote, in-office, and hybrid work setups.
  • We offer highly competitive compensation packages, including the potential for shares.
  • We prioritize personal development and offer regular training and an annual learning stipend to tackle new challenges and grow your career in a hyper-growth environment.
  • Join a talented team of over 30 nationalities working in 7 countries and gain valuable experience in an exciting industry.
  • We offer autonomy, mentoring, and challenging goals that create incredible opportunities for both you and the company.
  • You will be given a lot of responsibility and trust. We believe that the best results come when the people responsible for a function are given the freedom to do what they think is best.  
    If you think you have what it takes to join a remarkable team #apply_now