Senior Cybersecurity Architect

HIRING FOR AN ONSITE POSITION IN RIYADH:
Senior Cybersecurity Architect

We're looking for a Senior Security Architect to be a foundational part of our Greenfield Digital Bank based in Riyadh. You will join our second line of defense (2LoD) function, helping us embed world class security into the design of a cloud-native digital bank hosted entirely on Oracle Cloud Infrastructure (OCI).

We're seeking a pragmatic, collaborative, and business-oriented security expert who brings deep knowledge of cloud security, DevSecOps, and compliance frameworks, and is passionate about building secure-by-design financial products for the future in compliance with the regulatory obligations to manage our risk exposure.

As a Senior Cybersecurity Architect, you'll play a vital role in the secure design, development, and launch of digital banking services across OCI, helping us align with regulatory requirements while enabling scalable, secure innovation. You'll report to the Chief Information Security Officer (CISO) and collaborate closely with product, engineering, risk, compliance, and platform teams. This role offers the opportunity to shape strategic outcomes, reduce risk exposure, and drive secure innovation across complex, interconnected ecosystems.

Key Responsibilities

• Lead the design and implementation of cloud-native security architectures across OCI.
• Act as the primary gatekeeper for security across large-scale programs and change initiatives.
• Provide security architecture guidance across all technology domains (APIs, databases, front-end, containers, integration, serverless).
• Review and approve secure design documentation and drive adoption of security by design principles.
• Ensure secure design and deployment of OCI landing zones in collaboration with cloud platform teams.
• Define and drive DevSecOps strategy using OWASP DSOMM and "shift-left" practices.
• Conduct security reviews using modern tooling and practices to identify vulnerabilities in cloud-native architectures.
• Ensure alignment with compliance mandates, including SAMA, NCA, SWIFT, PDPL, and PCI DSS.
• Work with geographically distributed teams to embed security into agile delivery.
• Collaborate with developers and product teams to drive secure engineering and customer trust.
• Support threat modelling, risk identification, and mitigation strategies across the bank's product lifecycle.
• Actively contribute to and influence product and platform roadmaps through a security-first lens.

For the role of Senior Cybersecurity Architect, you also need to have
a passion for Cybersecurity, with a focus on building secure-by-design architectures that safeguard complex environments, align with business needs, and meet regulatory requirements.

• Education: A bachelor's degree in computer science, computer engineering, information technology, or a related field.
• Experience: 8+ years of relevant experience in cybersecurity architecture, enterprise security design, or related domains.
• Security Framework Expertise: Deep understanding and practical application of frameworks and standards such as ISO 27001, NIST, TOGAF, and SABSA.
• Strong experience designing security in cloud-native programs on OCI, AWS, GCP, or Azure.
• Proven ability to operate in agile environments, with working knowledge of Jira and Confluence.
• Deep understanding of public cloud attack surfaces and the shared responsibility model.
• Familiarity with modern cloud security testing tools and vulnerability management.
• Experience conducting security reviews across software and infrastructure teams.
• Understanding of DevSecOps and secure SDLC best practices and tooling.
• Knowledge of security for APIs, microservices, containers, serverless, and data platforms.
• Ability to write secure design documentation and review product architectures.
• Experience in aligning security architecture with commercial and regulatory goals.
• Familiarity with OCI-specific security capabilities, such as compartments, IAM, security zones, and vaults.
• Experience collaborating across business and technical teams to manage risk exposure.
• Excellent stakeholder management skills, with a focus on enablement and education.
• Ability to work independently, manage multiple priorities, and operate in a fast-paced environment.