Cybersecurity & DMO Director

About RUARUA is a forward-thinking institution for cross-cultural arts education and creative innovation in the Middle East that fosters bold ideas that inspire progress and transform society by cultivating industry and academic collaboration and rethinking creative education, all while creating a space for global ideas to flourish in a culturally inspiring environment.Our VisionTo be an inspiring beacon of knowledge for future generations, integrating culture and arts, empowering students to discover passions and develop talents while fostering creativity and cultural exchange.Our MissionTo cultivate an innovative educational environment in culture and arts, delivering cutting-edge programs that foster cultural and artistic engagement, enriching both the Saudi and global communities.Our AspirationsThe leading cultural university across the Middle East and North Africa.Ranked among top 50 universities worldwide specializing in cultural education.A global hub for cultural education and knowledge exchange.Job SummaryLeads the university's cybersecurity and data governance function by defining and governing cybersecurity strategy, policies, controls, architecture, monitoring, incident response, and data governance to protect digital assets, manage cyber risk, and strengthen resilience. The role aligns cybersecurity and data priorities with institutional objectives, oversees governance frameworks for cyber and data management, and ensures compliance with NCA, NDMO and relevant Saudi cybersecurity and data governance frameworks. The role partners with D&T on technical implementation and remediation, and with Risk & BCM on enterprise risk and business continuity governance while fostering a security-aware, data-conscious culture across the university.General AccountabilitiesStrategy and PlanningOversee the design and implementation of Cybersecurity & DMO department’s strategic plan, objectives, and goals ensuring alignment with RUA's strategy.Direct and approve the department’s operational plans and oversee implementation securing achievement of identified objectives.Develop the department’s performance objectives and indicators and continuously monitor progress towards realization of objectives.Budget ManagementParticipate in Legal & GRC's budgeting process and provide input from Cybersecurity & DMO standpoint.Ensure effective utilization of the department’s budget and report accurately on progress made and challenges encountered.Policies, Processes, and ProceduresOversee the design and set up of Cybersecurity & DMO department’s policies, processes and procedures to align with and exceed best-in class standards.Oversee the implementation of procedures and controls to ensure efficiency, transparency and accountability across all business areas within the function.Oversee regular reviews of policies, processes, guidelines, and procedures to confirm alignment with RUA requirements and market developments, and coordinate corrective actions where needed.People ManagementInspire the team and provide guidance, delegation and mentorship to create a performance-driven culture.Ensure availability and qualification of team through recruitment, training, development and performance management.Take actions to enhance employee engagement and motivation.Provide clear top-down communication to employees and bottom-up feedback to senior management.Job Specific AccountabilitiesCybersecurity Strategy, Governance, and ComplianceLead the development and execution of the university's cybersecurity strategy, aligning priorities, investment, and risk posture with institutional objectives.Establish governance structures, decision rights, and accountability forums to direct cybersecurity risk management and compliance.Direct performance reporting on security posture, risk trends, and control effectiveness to support executive decision making.Cyber Risk, Third-Party Risk, and Secure-by-DesignDrive enterprise cyber risk assessment and treatment planning, ensuring material risks are owned, mitigated, and escalated appropriately.Oversee establishment of requirements for third-party cybersecurity due diligence, contracting safeguards, and remediation oversight.Ensure secure-by-design principles into projects, changes, and solution reviews are embdeeded so security requirements are addressed before implementation.Coordinate with academic and administrative leaders to integrate cybersecurity priorities into business planning and operational decisions.Architecture, Identity, and Technical Control OversightGuide the evolution of the enterprise security architecture to strengthen resilience, standardization, and control effectiveness.Direct identity access management (IAM) governance, including access standards, privileged access, authentication, and lifecycle controls.Partner with Digital & Technology to align security design, remediation priorities, and hardening actionsApprove control expectations and review effectiveness across critical platforms, services, and data environments.Threat Intelligence, Monitoring, and Incident ResponseLead the threat intelligence program to anticipate emerging risks and shape proactive defense measures.Set the direction for security monitoring, alert escalation, and response readiness across the university.Direct major incident response, including containment, recovery, forensic coordination, and executive reporting.Ensure crisis communication, regulatory notification, and lessons learned processes are tested and continuously improved.Data Management and GovernanceOversee the university-wide data governance framework in alignment with NDMO requirements.Establish data ownership, decision rights, policies, and standards to enable trusted, compliant, and effective data use.Direct data lifecycle governance across classification, access, retention, sharing, and disposal.Champion data quality, privacy, and accountability practices that improve data maturity and value realization.Knowledge & Experience8+ years of progressive experience in cybersecurity, information security, technology risk, or a related field, including at least 4 years in a managerial or leadership roleDemonstrated experience defining security strategy, governance, architecture oversight, incident response, third-party cyber risk, IAM oversight, and regulatory compliance in a complex environmentEducation & CertificationsBachelor degree in cybersecurity, information security, computer science, information systems, or related discipline is requiredMaster degree in cybersecurity, information security, information systems, computer science, business administration, or a related field is preferredProfessional certifications within cybersecurity fields are prefer.Internal StakeholdersRisk & BCMComplianceGovernanceDigital & Technology (D&T)Internal AuditProcurementExternal StakeholdersNational Cybersecurity Authority (NCA)National Data Management Office (NDMO)External Auditors and Independent AssessorsManaged Security Service Providers and Technology VendorsIncident Response, Forensics, and Penetration Testing SpecialistsWhy joining RUA:RUA represents a platform for discovery, a space where talent is nurtured, and a gateway for Saudi art and culture to the world. We welcome you to join us on this exceptional journey. Together, we will shape the ambitious cultural future of the Kingdom and inspire the world.As the first of its kind in the MENA region, RUA serves as a center of creativity, knowledge, and innovation, contributing to shaping the future of Saudi Arabia’s cultural ecosystem and creative economy, driving the growth of Saudi Arabia’s cultural sector in alignment with Saudi Vision 2030.