Job summary
Lucidya is hiring a Director of Information Security in Riyadh to lead and scale security across products, cloud infrastructure and corporate environments. The role builds the security team, manages compliance and incident response, and acts as the primary security contact for customers and auditors.
Key responsibilities
- Define and execute the company security strategy and roadmap.
- Build, mentor, and grow the security team with clear responsibilities.
- Implement and maintain controls for PDPL, NCA, ISO 27001, and SOC 2.
- Embed security into product, cloud, and deployment pipelines.
- Oversee security operations, monitoring, and incident response.
- Manage audit readiness, evidence collection, and third-party assessments.
- Run security awareness, phishing exercises, and access reviews.
- Serve as primary security contact for customers, auditors, and vendors.
Requirements
- 8+ years of progressive information security experience.
- At least 3 years leading security teams or programs.
- Experience securing SaaS or cloud-based software.
- Hands-on implementation of ISO 27001 and SOC 2 controls.
- Familiarity with Saudi PDPL and NCA requirements.
- Experience in incident response and vulnerability remediation.
- Bachelor’s degree in cybersecurity, CS, IT, or equivalent experience.
Skills
Source: Workable. Last checked as open: 14 Nov 2026. You apply directly with the employer.
Apply now