Cybersecurity Officer (Mid-Level) - at Sadu Portfolio Company
About The Company
The company is a fast-scaling fintech in Saudi Arabia providing invoice-based BNPL and factoring solutions to underserved micro-businesses in the grocery and pharma supply chains. We are backed by top-tier VCs and part of the SAMA Regulatory Sandbox. As we prepare for full licensing, we’re hiring a Compliance powerhouse to help build and run our AML/CTF and regulatory frameworks.
Role Overview
The position of Cybersecurity Officer (Mid-Level) will work closely with internal legal & product teams, external regulators (SAMA), and our GRC & AML solution providers (Faceki, ELM, Wathiq, etc.).
Key Responsibilities
Support the implementation of cybersecurity policies and procedures in accordance with SAMA’s Cybersecurity Framework (CSF) / (CRFR)
Conduct regular vulnerability assessments, penetration testing coordination, and log analysis
Work with the virtual CISO and senior consultants to maintain compliance with ISO 27001, NCA ECC, and SAMA CSF controls
Manage day-to-day security tools such as firewalls, endpoint protection, and threat detection systems
Support incident response planning, playbook development, and simulated attack exercises
Maintain documentation related to access control, third-party risk, data classification, and BCP/DR testing
Monitor cloud infrastructure (GCP) for misconfigurations, anomalies, and ensure secure deployment practices
Required Qualifications & Experience
Bachelor’s in Law, Finance, Business, or related field (Master’s or certification a plus)
3–7 years in a regulated financial institution or fintech (preferably under SAMA, CMA, or global central bank)
Deep familiarity with AML/CTF frameworks and/or SAMA compliance regulations
Experience with GRC tools and digital KYC platforms
Strong understanding of fintech and digital onboarding flows
Excellent English and Arabic communication (written & spoken)
Preferred Certifications
CAMS, CFE, ICA, CRCMP, or similar AML/Compliance certifications is advantage
Experience with ISO 27001, NCA controls, or PCI-DSS is a plus
What We Offer
The opportunity to shape the compliance culture at a fast-growing fintech
Direct interaction with regulators and decision-makers
Competitive compensation and equity options
Fast-track learning environment with exposure to cross-functional teams