This is a senior role to support the growth of Digital Risks in the Kingdom of Saudi Arabia (KSA), specifically to lead on cyber security and digital risk management programmes, focused but not limited to IT/OT security, enterprise security, cloud security and GRC.
The role is also to:
- Support the development and scaling of our Cyber Protect business in KSA.
- Accelerate our strategic commercial penetration of high priority KSA accounts
- Position Digital Risks services to senior client decision makers at the C-Level.
- Collaborate closely with all service lines, particularly our physical security teams.
Delivering client projects:
- Ability to design and manage comprehensive security programmes tailored to
diverse environments, including hybrid IT/OT settings.
- Demonstrable experience of delivering projects to industry frameworks and
compliance requirements, such as NIST800-53, FedRAMP, NIST CSF/ISO27001 and national cybersecurity authority (NCA)
- Expertise in emerging technologies such as AI, IoT, cloud solutions, and advanced threat detection systems.
- Experience in advising on their application, assessing their suitability for specific environments, determining the optimal timing and approach for implementation.
- Expertise in delivering large-scale programmatic engagements, including responsibility for stakeholder engagement, scoping and pricing, resource management, milestone delivery and issue and escalation management.
Business development:
- Originate cyber risk management and technology resilience opportunities.
- Own key client relationships, supported with account, sales and marking plans.
- Position our cyber threat intelligence, assurance and incident response practices.
- Provide clear, brand-enhancing, and energetic consulting leadership in KSA, actively promoting Control Risks as an advisor on cyber and technology risk in the market, leading to a significant increase in long-term, programmatic work.
Supporting the growth of the practice:
- Recruit, retain and manage Protect resources on programme work.
- Support the development of innovative services that address client needs.
- Identify Partnership opportunities regionally/globally to drive business growth.
- Foster a culture of collaboration and One Firm behaviour.
Knowledge and Experience:
Essential
- 12+ years’ experience in cyber security and related disciplines, particularly in technology and infrastructure consulting projects.
- Track record of developing trusted advisor relationships with C-level leaders.
- In-country experience of delivering large, converged programmes of work in KSA.
- Subject matter expertise, including extensive and demonstrable fluency in
technology risk issues.
- Proven experience of operating in senior security and resilience roles, including knowledge of IT and OT network infrastructure.
- Proven experience in delivering risk assessments against industry standards.
Qualifications and specialist skills
- Undergraduate or a post graduate degree in a field related to security, information security, intelligence, or computer science.
- CISSP, CISM, CIRSC, ISO27001 lead auditor, SANS or similar industry
qualifications/certifications
- Demonstrable commercial acumen.
- Excellent presentation and analytical skills.
- Proven cyber subject matter expertise derived from substantial commercial or government experience.