Security Delivery Leader Permanent
DXC : Security Delivery Lead — Riyadh — Saudi na7onals only
Job Summary:
DXC is seeking an experienced Security Delivery Lead to manage and oversee a
mul=disciplinary security team suppor=ng a major banking client in Saudi Arabia. The
SDL will ensure the consistent delivery of security engineering, opera=ons, and
compliance services, aligned with SAMA CSF and NCA ECC requirements. The ideal
candidate is a Saudi na=onal with 5–10 years of security delivery/program leadership in
regulated environments and strong execu=ve communica=on, ac=ng as the single point
of accountability for security delivery to the client, driving maturity, closing
vulnerabili=es, and ensuring SLA/KPI compliance.
Key Responsibili7es:
• Lead and manage a mul=-domain security team (F5, Network, PAM/IAM/PKI,
Data/Endpoint, SIEM, Vulnerability, GRC).
• Act as primary point of contact for client stakeholders for all security opera=ons
and delivery maVers.
• Ensure high-quality delivery of services against agreed SLAs and KPIs.
• Oversee vulnerability management and drive proac=ve remedia=on with
development and cyber teams.
• Lead incident response coordina=on, RCA, and repor=ng.
• Map and track compliance with SAMA CSF, NCA ECC, ISO 27001 frameworks.
• Drive con=nuous improvement and security maturity in processes and repor=ng.
• Coordinate with mul=-vendor resources and geographically dispersed teams.
• Provide regular dashboards, scorecards, and risk assessments to client and
management.
• Mentor and support domain leads and engineers; foster collabora=on across
teams.
Required Qualifica7ons:
• Bachelor’s degree in Informa=on Security, Computer Science, or related field.
• Minimum 10 years of IT/cybersecurity experience, with at least 5 years in security
delivery/program management roles.
• Broad knowledge of security domains:
o Network security (firewalls, SSL inspec=on, DDoS, email security)
o Applica=on security (F5 BIG-IP (APM/ASM/LTM/GTM), DNS security)
o IAM & PKI (CyberArk PAM, SailPoint IGA, PKI)
o Data/endpoint security (DLP, EDR, DEM, AV/Sandboxing)
• Proven experience in banking or regulated environments under SAMA/NCA.
• Strong stakeholder management, execu=ve repor=ng, and team leadership skills.
• Bilingual: Arabic & English.
Desired Skills & Cer7fica7ons:
• Professional: CISSP, CISM, CISA, CRISC, PMP, ITIL.
• Vendor: F5, Palo Alto, CyberArk, SailPoint, ForcePoint, Carbon Black.
• Familiarity with ITIL, ServiceNow, JIRA, or similar delivery tools.
Working Condi7ons:
• Based on-site at client premises in Riyadh.
• Full-=me, Sunday to Thursday, with availability for escala=ons/incidents.
• Long-term engagement with poten=al for extension based on performance.
Leadership & Delivery Skills: Cybersecurity Domain Knowledge (broad, not deep SME)
• Proven track record in delivery/project/program management within security or
regulated environments
• Team leadership across mul=ple domains: F5/Applica=on Security, Network,
IAM/PKI, Data & Endpoint, Compliance
• Strong stakeholder management (execu=ves, regulators, auditors, vendors)
• Incident leadership: chairing war rooms, RCA ownership, escala=on handling
• Experience with mul=-vendor and geographically dispersed teams
• Communica=on & repor=ng skills (execu=ve dashboards, SLA/KPI scorecards)
• Network Security: firewalls (Palo Alto, Cisco, For=net), SSL inspec=on, DDoS
(Arbor), IPS, email security gateways
• Applica=on Security: F5 ASM/Advanced WAF, Access Policy Manager, DNS
security
• IAM & PKI: CyberArk PAM, Iden=ty Governance (SailPoint preferred), Ac=ve
Directory CS PKI
• Data & Endpoint Security: DLP (ForcePoint), DRM, EDR (Carbon Black,
CrowdStrike), AV/Sandboxing (TrendMicro)
• Compliance & Governance: SAMA Cybersecurity Framework, NCA ECC, ISO 27001
Regulatory & Audit Awareness:
• Familiarity with SAMA CSF, NCA ECC, ISO 27001, NIST CSF
• Experience in audit prepara=on, evidence collec=on, and remedia=on tracking
• Ability to align delivery with compliance obliga=ons
Methodologies & Tools:
• ITIL, Change/Incident/Problem Management
• Risk assessment & management frameworks
• Project/Delivery tools (MS Project, ServiceNow, JIRA, Power BI)
• Strong documenta=on and repor=ng discipline
Cer7fica7ons (Preferred):
• CISSP, CISM, CISA, CRISC (security governance/leadership)
• PMP, ITIL (delivery/governance)
• Vendor: F5, Palo Alto, CyberArk, SailPoint, ForcePoint, Carbon Black/CrowdStrike
SoY Skills:
• Bilingual (Arabic & English)
• Analy=cal mindset, structured thinking
• Confidence in execu=ve communica=on
• Ability to work under pressure, high-stakes environments
• Collabora=ve, able to bridge IT, cyber, and applica=on teams