Job summary
Associate Director for Cybersecurity Risk and Compliance at Qiddiya Investment Company in Riyadh. The role leads IT and OT risk assessments, manages compliance registers, coordinates audits and oversees third‑party cybersecurity risk.
Key responsibilities
- Perform periodic and ad hoc cybersecurity risk assessments across IT and OT environments
- Conduct OT-specific assessments for PLCs, HMIs, RTUs and engineering systems
- Maintain and update cybersecurity risk and compliance registers with ratings and treatment plans
- Coordinate risk reviews for major IT/OT changes and reassess after incidents or regulatory updates
- Lead internal compliance assessments and act as primary interface for external audits and inspections
- Manage third-party cybersecurity assessments, due diligence and remediation tracking
- Define and monitor key risk indicators (KRIs) and track remediation progress
- Validate configuration baselines and effectiveness of controls before closing compliance gaps
Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT or related field
- Master's degree preferred
- 10–12+ years of cybersecurity experience
- Strong experience in risk management, compliance, assessments and assurance
Skills
Cybersecurity risk assessmentOT securitySCADA/DCS/PLCCompliance auditsRisk register managementThird-party risk assessmentKRI definitionControl validationIEC 62443NCA OTCC
Source: Workable. Last checked as open: 14 Nov 2026. You apply directly with the employer.
Apply now
