Opportunity at
SallaHead of Security
Salla is recruiting a Head of Security to be the company's most senior security decision-maker. The role sets security strategy, builds the security function and owns…
Career Tools
About This Role
Salla is recruiting a Head of Security to be the company's most senior security decision-maker. The role sets security strategy, builds the security function and owns the controls that protect the platform, its staff and merchants. It turns cyber risk into business language for executives and the Board, and frames security as a competitive edge rather than a drag on progress. This person oversees every security domain, including cloud, networks,…
Job Description
Salla is recruiting a Head of Security to be the company's most senior security decision-maker. The role sets security strategy, builds the security function and owns the controls that protect the platform, its staff and merchants. It turns cyber risk into business language for executives and the Board, and frames security as a competitive edge rather than a drag on progress.
This person oversees every security domain, including cloud, networks, endpoints, physical security, identity and access, security operations and incident response, and governance, risk and compliance. The role also runs third-party risk and security awareness, sets budgets and key indicators, and speaks for the company's security position before auditors, regulators, partners and customers.
The posting wants at least twelve years of experience across information and cyber security, with five of those years at senior leadership level in SaaS, fintech or online retail. Expertise in cloud security, with AWS strongly preferred, along with Kubernetes and modern delivery pipelines, is expected. Experience running large security operations and steering audits, especially with IPO or regulatory-readiness work, is valued. Based in Makkah, Saudi Arabia, the post is on-site.
Responsibilities
- Set the company-wide security direction, plan and operating approach for cloud, networks, endpoints, physical sites and GRC
- Brief the executive team and Board on cyber risk, investment priorities and regulatory exposure
- Manage the security budget, headcount and tooling, and measure the return on spend
- Lead cloud security, including landing-zone hardening, secrets handling and workload protection
- Oversee network security: edge defense, DDoS mitigation, web application firewalls and zero-trust access
- Direct endpoint protection, vulnerability management and data loss prevention
- Run physical security for offices and sites, including Makkah
- Lead security operations, detection, threat intelligence and incident response
- Direct certification and audit efforts for ISO 27001, PCI DSS and SOC 2
- Manage third-party risk, security awareness and the multidisciplinary security team
Requirements
- Twelve or more years across information and cyber security
- Five or more years leading security at senior level (Head of Security, Director, CISO track) in SaaS, fintech or online retail
- Proven hands-on leadership in cloud, networks, endpoints, physical security and GRC
- Deep, hands-on cloud security knowledge, including Kubernetes and modern pipelines
- Proven record of standing up SecOps and incident response for large environments
- Solid GRC background spanning ISO 27001, PCI DSS, GDPR, plus Saudi regimes like NCA controls, PDPL and SDAIA
- Executive-level communication that translates technical risk for a Board
- An undergraduate degree in computing, engineering, information security or a neighboring discipline
- Able and legally allowed to work in person in Makkah, Saudi Arabia
Qualifications
- Experience with the SAMA Cyber Security Framework
- Experience leading IPO or regulatory-readiness programs
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role based?
The posting places the role in Makkah, Saudi Arabia, on-site.
What experience is required?
The posting asks for at least twelve years across information and cyber security, including five years at senior leadership level in SaaS, fintech or online retail.
Does the posting state a salary?
No. The posting does not specify a salary or any benefits.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
