Head of Security
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Salla is looking for a Head of Security to lead the enterprise security strategy, build the team, and own controls across cloud, network, endpoint, physical, and GRC domains. The role requires 12+ years in cyber security with 5+ years in senior leadership at a SaaS, fintech, or e-commerce organization.
Key Skills for This Role
Responsibilities
- Own and evolve the enterprise security strategy, roadmap, and operating model across cloud, network, endpoint, physical, and GRC
- Act as the organization's principal security advisor; brief executive team and Board on cyber risk posture
- Define and steward the security budget, headcount plan, and tooling portfolio
- Establish security KPIs, OKRs, and a metrics driven reporting cadence
- Lead cloud security across the platform, including landing zone hardening, network segmentation, secrets management, and workload protection
- Govern Infrastructure as Code security, container and Kubernetes security, and CI/CD pipeline integrity
- Drive Cloud Security Posture Management, workload protection, and continuous compliance
- Partner with SRE and Platform Engineering to embed secure by default guardrails
- Own network security architecture, including edge protection, DDoS mitigation, WAF, segmentation, and zero trust network access
- Govern CDN and edge security stack, bot management, rate limiting, and origin lockdown
- Oversee secure connectivity, private connectivity, VPN, and DNS security
- Lead endpoint protection across corporate and engineering fleets, including EDR/XDR, device hardening, MDM, and disk encryption
Requirements
- 12+ years in information and cyber security
- 5+ years in senior security leadership (Head of Security, Director, or CISO track) at a SaaS, fintech, or e commerce organization
- Demonstrated ownership of security across multiple domains: cloud, network, endpoint, physical, and GRC
- Deep hands on and architectural knowledge of cloud security (AWS strongly preferred), including Kubernetes and modern CI/CD
- Proven track record building and operating security operations and incident response at scale
- Strong GRC experience across ISO 27001, PCI DSS, GDPR and Saudi regulatory frameworks (NCA ECC and CCC, PDPL and SDAIA; SAMA CSF a plus)
- Experience leading audits and certifications, ideally including IPO or regulatory readiness programs
- Excellent executive communication; able to translate technical risk into business and regulatory language for the Board
- Bachelor's degree in Computer Science, Engineering, Information Security, or a related field
- Willingness and eligibility to work on site in Makkah, Saudi Arabia
- Saudi national (as per job description)
Full Job Posting
Role Purpose
- As Head of Security at Salla, you are the most senior security authority.
- Set the strategy, build the team, and own the controls that keep the platform, people, and merchants safe.
- Translate risk into business language for executive team and Board.
- Lead end to end across every security domain and represent Salla's security posture to auditors, regulators, partners, and customers.
Key Responsibilities
- Own and evolve the enterprise security strategy, roadmap, and operating model across cloud, network, endpoint, physical, and GRC.
- Act as the organization's principal security advisor; brief executive team and Board on cyber risk posture.
- Define and steward the security budget, headcount plan, and tooling portfolio.
- Establish security KPIs, OKRs, and a metrics driven reporting cadence.
- Lead cloud security across the platform, including landing zone hardening, network segmentation, secrets management, and workload protection.
- Govern Infrastructure as Code security, container and Kubernetes security, and CI/CD pipeline integrity.
- Drive Cloud Security Posture Management, workload protection, and continuous compliance.
- Partner with SRE and Platform Engineering to embed secure by default guardrails.
- Own network security architecture, including edge protection, DDoS mitigation, WAF, segmentation, and zero trust network access.
- Govern CDN and edge security stack, bot management, rate limiting, and origin lockdown.
- Oversee secure connectivity, private connectivity, VPN, and DNS security.
- Lead endpoint protection across corporate and engineering fleets, including EDR/XDR, device hardening, MDM, and disk encryption.
Qualifications
- 12+ years in information and cyber security.
- 5+ years in senior security leadership (Head of Security, Director, or CISO track) at a SaaS, fintech, or e commerce organization.
- Demonstrated ownership of security across multiple domains: cloud, network, endpoint, physical, and GRC.
- Deep hands on and architectural knowledge of cloud security (AWS strongly preferred), including Kubernetes and modern CI/CD.
- Proven track record building and operating security operations and incident response at scale.
- Strong GRC experience across ISO 27001, PCI DSS, GDPR and Saudi regulatory frameworks (NCA ECC and CCC, PDPL and SDAIA; SAMA CSF a plus).
- Experience leading audits and certifications, ideally including IPO or regulatory readiness programs.
- Excellent executive communication; able to translate technical risk into business and regulatory language for the Board.
- Bachelor's degree in Computer Science, Engineering, Information Security, or a related field.
- Willingness and eligibility to work on site in Makkah, Saudi Arabia.
- Saudi national (as per job description).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Salla
Senior Sales Executive
Jeddah, KSA
What you'll do: Prospect, qualify, and close new merchant accounts across SMB and enterprise segments in your assigned verticals - self-sourcing your pipeline rather than waitin...
Lifecycle Marketing Manager
Jeddah, KSA
What you'll own The full lifecycle, onboarding to engagement to retention to win-back, end to end Building Mahally's Braze journeys from the ground up: flows, canvases, and trig...
Lifecycle Marketing Manager - Mahally
Riyadh, KSA
Mahally (by Salla) is seeking a Lifecycle Marketing Manager to own the full customer lifecycle from onboarding to retention. The role involves building Braze journeys, behavioral segmentation, A/B testing, and CRM report
Lifecycle Marketing Manager - Mahally
Jiddah, KSA
Mahally (by Salla) seeks a Lifecycle Marketing Manager to build and own the full customer lifecycle using Braze, SQL, and behavioral segmentation. The role involves building automated journeys, A/B testing, and driving r
Senior Sales Executive
Jiddah, KSA
Salla is looking for a Senior Sales Executive to prospect, qualify, and close new merchant accounts across SMB and enterprise segments in Saudi Arabia. The role involves full-cycle sales, pipeline management, and tailore
Engineering Manager - Enterprise Solutions & Delivery
Riyadh, KSA
Salla seeks an Engineering Manager to lead the Enterprise Solutions team, managing engineers delivering custom enterprise-grade services for premium merchants. The role involves team leadership, delivery management, and
Engineering Manager - Enterprise
Saudi Arabia, KSA
Lead the Enterprise Solutions team, managing engineers, ensuring high-quality technical delivery, and adapting services for global markets while fostering client success.
Engineering Manager - Enterprise
Mecca, KSA
Salla seeks an Engineering Manager to lead the Enterprise Solutions team, delivering custom enterprise-grade services for premium merchants. You will manage engineers, oversee technical delivery, and act as a bridge betw
Senior Sales Executive
Jeddah, KSA
Lifecycle Marketing Manager
Jeddah, KSA
Lifecycle Marketing Manager - Mahally
Riyadh, KSA
Lifecycle Marketing Manager - Mahally
Jiddah, KSA
Senior Sales Executive
Jiddah, KSA
Engineering Manager - Enterprise Solutions & Delivery
Riyadh, KSA
Engineering Manager - Enterprise
Saudi Arabia, KSA
Engineering Manager - Enterprise
Mecca, KSA