Director of Information Security (Saudi Only)

تعلن Lucidya عن حاجتها إلى Director of Information Security (Saudi Only).

8+ years of progressive experience in information security, including at least 3 years leading security teams or programs.

Experience securing a SaaS platform or comparable cloud-based software environment.

A track record spanning both technical security and governance, risk, and compliance.

Hands-on experience implementing ISO 27001 and SOC 2 controls, including direct involvement in external audits.

Practical familiarity with Saudi PDPL and NCA requirements, and the ability to translate them into technical controls and evidence.

Experience leading investigations, incident response, and vulnerability remediation across multiple teams.

Bachelor's degree in cybersecurity, computer science, IT, or a related field, or equivalent practical experience.

Strong grasp of application and API security, secure development practices, and common vulnerability classes.

Practical experience with CI/CD security controls: code, dependency, container, secret, and infrastructure scanning.

Strong AWS, Azure or GCP security knowledge, with the ability to oversee controls across both.

Familiarity with Kubernetes, containers, infrastructure as code, and modern deployment architectures.

Experience with SIEM, cloud security monitoring, endpoint protection, identity management, and vulnerability management tools.

Ability to automate security and evidence-collection work, with hands-on experience applying AI agents or LLM-based tooling to security operations.

Proven ability to build accountable teams and drive improvement across departments.

Sound judgment when balancing security risk, delivery needs, and customer commitments.

Clear communication with engineers, executives, auditors, and customers alike.

Strong ownership, including following through until corrective actions are verified complete.

Duties: lead and scale the security function across products, cloud infrastructure, corporate environment and compliance programs, reporting to the CTO; define and execute the security strategy and roadmap; lead and grow the security team; own security policies, risk assessments and the risk register; lead compliance with Saudi PDPL, NCA, ISO 27001, SOC 2; oversee product, application and cloud security, penetration testing and vulnerability assessments; run security awareness training; own security operations and incident response; manage the vulnerability disclosure program and support Sales and Customer Experience with security questionnaires.