رئيس الأمن السيبراني

Abdul Latif Jameel comprises diversified businesses with deep roots in the Middle East, North Africa, and Turkey (MENAT region). Strong networks and long-established relationships make us a powerful partner, opening doors for those who want to do business in the region.

Our businesses represent some of the world’s leading brands, earning us their trust and building long-lasting and mutually beneficial relationships. Our commitment to anticipate and support our partners’ needs has driven our success.

From our modest beginnings 75 years ago as a small trading business and then a Toyota distributorship in Jeddah, Saudi Arabia, we have established an extensive operations infrastructure, built the largest vehicle distribution network in Saudi Arabia, and, along the way, we have accumulated comprehensive automotive expertise throughout the region.

Applying our vast experience in the automotive sector, we’ve used our expertise and operations infrastructure to diversify into new sectors that contribute to the ‘infrastructure of life’ in the MENAT region.

Purpose of the Job

The Head of Cybersecurity (Senior General Manager) is responsible for leading and governing the cybersecurity function across ALJ Motors, ensuring the protection of the organization's information assets, digital services, and critical business operations. The role establishes and maintains the cybersecurity governance framework, drives the cybersecurity strategy and roadmap, manages cyber risks, ensures compliance with applicable legal and regulatory requirements, and enables secure business operations and digital transformation, the role provides strategic leadership for cybersecurity by overseeing the organization's cybersecurity posture, promoting a strong cybersecurity culture, strengthening cyber resilience, providing governance over cybersecurity incidents, and ensuring cybersecurity objectives remain aligned with business priorities, enterprise strategy, and regulatory obligations.

Cybersecurity capabilities are provided through a collaborative operating model involving ALJ Motors Cybersecurity, Corporate Cybersecurity, Motors IT, JTECH, and other approved service providers, in accordance with the approved Cybersecurity Governance Model and RACI Matrix. While Corporate Cybersecurity provides enterprise strategy, standards, shared services, and technical capabilities via CoE, the Head of Cybersecurity remains accountable for cybersecurity governance, cyber risk management, regulatory compliance, and business cybersecurity within ALJ Motors as well as execution of ALJM-specific cybersecurity activities, while ensuring enterprise alignment, effective collaboration, and clear accountability between ALJ Motors and Corporate Cybersecurity.

Key Accountabilities: Description

• Cybersecurity Strategy, Governance, and Risk Management.
• Cybersecurity Operations Oversight and Resilience Management.
• Secure Business Enablement and Integration.
• Cybersecurity Awareness, Culture, and Stakeholder Engagement.
• Cybersecurity Leadership, Capability Development, and Assurance Management.

Key Accountabilities: Performance Indicators

• % completion of cybersecurity strategic roadmap initiatives.
• % of cybersecurity policies and standards reviewed and updated within schedule.
• Number of overdue cyber risks in the Cyber Risk Register.
• % of identified cyber risks with approved treatment plans.
• Regulatory and compliance audit pass rate.
• Cybersecurity maturity score improvement year-over-year
• Mean Time to Detect (MTTD) cybersecurity incidents.
• Mean Time to Respond (MTTR) cybersecurity incidents.
• % of critical vulnerabilities remediated within SLA.
• Endpoint protection coverage rate.
• Identity and Access Management compliance rate.
• Cyber recovery testing success rate.
• Number of major cybersecurity incidents impacting business operations.
• % of projects undergoing cybersecurity review prior to implementation.
• % of critical business initiatives with cybersecurity requirements embedded.
• Number of security findings identified during project lifecycle reviews.
• Stakeholder satisfaction score regarding cybersecurity support.
• Percentage of technology solutions assessed for cybersecurity compliance before go-live.
• Security awareness training completion rate.
• Phishing simulation success/failure rate.
• Cybersecurity culture survey score.
• Number of stakeholder engagement sessions conducted.
• % of cyber crisis exercises completed according to plan.
• Improvement rate in awareness assessment results year-over-year.
• Team performance achievement against annual objectives.
• Employee development and certification completion rate.
• External audit and assessment closure rate.
• % of audit findings remediated within agreed timelines.
• Vendor cybersecurity assessment completion rate.
• Employee engagement score within the Cybersecurity function.
• Resource utilization and budget adherence rate.

Major Activities

1. Develop, implement, and continuously enhance the ALJ Motors Cybersecurity Strategy, Governance Framework, policies, standards, and roadmap, ensuring alignment with business objectives, enterprise cybersecurity direction, overall strategy/roadmap and ensure compliance with applicable regulatory requirements.
2. Lead cybersecurity governance by identifying, assessing, monitoring, and managing cyber risks; overseeing regulatory compliance; maintaining the Cyber Risk Register; and ensuring effective implementation of risk treatment and assurance activities.
3. Executive Advisory & Decision Support. Advising executive management on cyber risks, investment priorities, regulatory developments, and strategic decisions.
4. Provide governance and executive oversight of cybersecurity operations, including security monitoring, incident response, vulnerability management, identity and access management, endpoint protection, cyber recovery, and other cybersecurity capabilities delivered through Corporate Cybersecurity, Motors IT, and JTECH in accordance with the approved Governance Model and RACI.
5. Lead cybersecurity incident governance, cyber crisis preparedness, business continuity coordination (from a cyber perspective), and continuous improvement to strengthen the organization's cyber resilience.
6. Execute ALJM-specific cybersecurity activities in alignment and coordination with the different stakeholders.
7. Partner with business units, Motors IT, JTECH, and Corporate Cybersecurity to ensure cybersecurity requirements are embedded into business processes, projects, digital initiatives, and technology solutions, while supporting secure business transformation.
8. Ensure cybersecurity requirements are embedded throughout the project and solution lifecycle, including architecture reviews, secure design, and implementation governance.
9. Develop and promote a strong cybersecurity culture through enterprise awareness programs, executive engagement, communication, and stakeholder collaboration.
10. Provide regular cybersecurity reporting and strategic advice to executive management on cybersecurity posture, emerging threats, key risks, and strategic initiatives.
11. Foster strong collaboration with Corporate Cybersecurity, Motors IT, JTECH, business units, regulators, auditors, and external stakeholders to support enterprise cybersecurity objectives.
12. Lead the Cybersecurity function by managing organizational capability, team performance, external partners, regulators, and assurance providers, security assessments, audits, and vendor relationships while fostering collaboration, innovation, and professional development.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related discipline.
• A Master's degree in Cybersecurity, Information Security, Business Administration (MBA), Risk Management, or a related field is desirable.

Minimum Experience

• Minimum 12 years of progressive experience in Cybersecurity, Information Security, Information Technology, Risk Management, or related disciplines, including at least 5 years in a senior cybersecurity leadership role with responsibility for cybersecurity governance, cyber risk management, regulatory compliance, executive stakeholder engagement, and leading multidisciplinary teams. Experience working within large, complex, or multi-entity organizations is highly desirable.
• Experience with NCA regulations/implementations

Languages

Arabic & English.

Special Certifications / Membership

One or more internationally recognized certifications such as CISSP, CISM, CRISC, CGEIT, or equivalent. Additional certifications in ISO/IEC 27001, NIST Cybersecurity Framework, COBIT, Business Continuity (ISO 22301), Risk Management, Cloud Security (CCSP), or related disciplines are desirable.

Competencies

Learns Through Reflection (Middle Management)

Fosters Collaboration (Middle Management)

Ensures Accountability (Middle Management)

Plans & Aligns (Middle Management)

Focuses on the customer (Middle Management)

Why Work for Us?

With a truly international footprint and more than three quarters of a century of commercial success behind us, we are today, not only a leading employer across the Middle East, North Africa and Turkey (MENAT) region, but also offer exciting opportunities worldwide, from Chile to Japan, from the UK to Australia.

Our values guide the way we work with our business partners, within our communities, and with each other.

Through Respect, Innovation, a Pioneering Spirit, and Empowerment, we are proud of our culture which sees ideas blossom, people thrive and successes flourish.