Cybersecurity Officer (Mid-Level) - at Sadu Portfolio Company

About The Company

The company is a fast-scaling fintech in Saudi Arabia providing invoice-based BNPL and factoring solutions to underserved micro-businesses in the grocery and pharma supply chains. We are backed by top-tier VCs and part of the SAMA Regulatory Sandbox. As we prepare for full licensing, we’re hiring a Compliance powerhouse to help build and run our AML/CTF and regulatory frameworks.

Role Overview

The position of Cybersecurity Officer (Mid-Level) will work closely with internal legal & product teams, external regulators (SAMA), and our GRC & AML solution providers (Faceki, ELM, Wathiq, etc.).

Key Responsibilities

  • Support the implementation of cybersecurity policies and procedures in accordance with SAMA’s Cybersecurity Framework (CSF) / (CRFR)

  • Conduct regular vulnerability assessments, penetration testing coordination, and log analysis

  • Work with the virtual CISO and senior consultants to maintain compliance with ISO 27001, NCA ECC, and SAMA CSF controls

  • Manage day-to-day security tools such as firewalls, endpoint protection, and threat detection systems

  • Support incident response planning, playbook development, and simulated attack exercises

  • Maintain documentation related to access control, third-party risk, data classification, and BCP/DR testing

  • Monitor cloud infrastructure (GCP) for misconfigurations, anomalies, and ensure secure deployment practices

Required Qualifications & Experience

  • Bachelor’s in Law, Finance, Business, or related field (Master’s or certification a plus)

  • 3–7 years in a regulated financial institution or fintech (preferably under SAMA, CMA, or global central bank)

  • Deep familiarity with AML/CTF frameworks and/or SAMA compliance regulations

  • Experience with GRC tools and digital KYC platforms

  • Strong understanding of fintech and digital onboarding flows

  • Excellent English and Arabic communication (written & spoken)

Preferred Certifications

  • CAMS, CFE, ICA, CRCMP, or similar AML/Compliance certifications is advantage

  • Experience with ISO 27001, NCA controls, or PCI-DSS is a plus

What We Offer

  • The opportunity to shape the compliance culture at a fast-growing fintech

  • Direct interaction with regulators and decision-makers

  • Competitive compensation and equity options

  • Fast-track learning environment with exposure to cross-functional teams

Apply Now: