Summary
Soum is a re-commerce marketplace operating in the MENA region. The virtual Information Security Officer will guide the company’s security posture, lead compliance audits aligned with KSA regulations, and support regulatory submissions for fintech operations. The role also covers data security strategies, documentation and data protection practices, and coordination with product and legal teams. Applicants should be Saudi nationals with 3–4 years of experience and knowledge of SAMA requirements, KSA cybersecurity law, ISO 27001, NIST, and SOC 2.
The posting
As published on soum.sa. Pulled from the employer's site and shown as they wrote it.
Work Week: Sunday - Thursday
Work Timings: 9 AM - 6 PM (Saudi Arabian Time Zone)
About Us:
Soum is on a mission to revolutionize e-commerce in the MENA region and beyond by building the most convenient and trustworthy re-commerce marketplace in the region. We're reshaping how C2C marketplaces operate, making buying and selling second-hand products seamless and reliable. Since our launch in July 2021, Soum has become one of the fastest-growing startups in the region, achieving rapid expansion in both our team and product offerings. In recognition of our impact and growth, we were proudly named one of the Top 10 LinkedIn Startups in Saudi Arabia for 2024.
Job Summary:
We are looking for a virtual cybersecurity or compliance expert to guide our security posture, particularly as we move into regulated spaces like auto-financing. The role is ideal for someone with extensive regulatory familiarity and previous experience operating in a strategic advisory capacity.
Key Responsibilities
- Lead compliance audits aligned with KSA regulations, especially SAMA frameworks
- Review and implement data security strategies across departments
- Support regulatory submissions and responses for fintech operations
- Oversee documentation and data protection practices
- Coordinate with product and legal teams to maintain standards
Ideal Profile
- Saudi national 3-4 years experience
- Deep understanding of SAMA regulatory requirements and KSA cybersecurity law
- Experience operating through or with an agency setup (ideal)
- Familiarity with ISO 27001, NIST, SOC 2 compliance standards
- Ability to lead cross-functional audit and compliance efforts across departments