Cybersecurity Unit Director

About the RoleThe University of Business and Technology (UBT) is seeking a qualified and experienced Cybersecurity Unit Director to establish and lead the University's independent Cybersecurity Unit within the Vice Rectorate of Digital Services.The role is responsible for developing cybersecurity strategy and governance, managing cyber risk and compliance, overseeing the protection of University data, systems, and digital services, and strengthening incident readiness and cyber resilience while maintaining independent governance and oversight of day-to-day technology operations. Key Responsibilities• Establish, organize, and manage the Cybersecurity Unit, including its operating plan, budget, KPIs, staffing, and technical requirements. • Develop and maintain cybersecurity strategies, governance frameworks, policies, standards, procedures, and guidelines. • Lead cybersecurity compliance assessments, audits, gap analyses, and remediation activities in alignment with NCA controls and applicable Saudi cybersecurity, data protection, and data-governance requirements. • Apply recognized frameworks and standards including ISO/IEC 27001, NIST CSF, CIS Controls, and COBIT. • Maintain the University's cyber-risk register and assess cybersecurity requirements for new projects, systems, platforms, services, contracts, and technology initiatives. • Oversee cybersecurity incident monitoring, classification, escalation, investigation, containment, recovery, and lessons learned. • Monitor vulnerabilities, penetration testing activities, national cybersecurity alerts, and remediation efforts. • Oversee cybersecurity resilience and BCP/DR readiness, including controls related to data protection, identity and access, cloud services, networks, endpoints, applications, and security monitoring. • Assess third-party and contractor cybersecurity risks and oversee external cybersecurity service providers. • Plan and deliver cybersecurity awareness programs, training, simulations, and testing across the University. • Prepare monthly, quarterly, and annual reports covering cybersecurity risk, compliance, incidents, vulnerabilities, and performance. Qualifications & Experience• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. A postgraduate qualification is desirable. • Minimum 4 years of relevant experience in cybersecurity GRC, audit, risk, compliance, or information security. • Demonstrated ability to lead cybersecurity programs, teams, and stakeholders. • Proven experience preparing assessments, executive reports, risk registers, control matrices, and improvement roadmaps. • Professional communication skills in Arabic and English. • Strong hands-on or assessment-level understanding of network security, IAM/PAM/MFA, SIEM/SOC, vulnerability and patch management, EDR/XDR, cloud, application and data security, encryption/DLP, backup, and BCP/DR. Preferred CertificationsProfessional certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Lead Implementer, Security+, CC, or equivalent are preferred. Join UBTJoin the University of Business and Technology (UBT) and contribute to strengthening the University's cybersecurity governance, resilience, and protection of its digital environment.Location: Jeddah, Saudi Arabia Employment Type: Full-time | On-site