Cyber Security Officer (Remote, Jordan)

About the role

WAFY is building one of Saudi Arabia's leading technology platforms for experiences and entertainment. We are seeking a Cyber Security Officer to lead our security posture across governance, compliance, vulnerability management, and incident response. This fully remote role is based in Jordan and focuses on protecting our platform, customer data, and cloud infrastructure.

Key responsibilities

• Develop and maintain information security policies and governance frameworks.
• Lead vulnerability assessments, remediation tracking, and penetration testing activities.
• Monitor, investigate, and respond to security incidents.
• Drive compliance with Saudi PDPL, NCA Essential Cybersecurity Controls (ECC), and industry best practices.
• Support security audits, investor due diligence, and security awareness training.

Required profile

• Minimum 4 years of cybersecurity experience in a product, SaaS, or platform environment.
• Hands‑on experience with vulnerability assessment and incident response.
• Familiarity with Saudi PDPL and NCA ECC frameworks.
• Strong communication skills in Arabic and English.

Required skills

• Vulnerability assessment and penetration testing.
• Incident response and remediation tracking.
• SIEM, log analysis, and security monitoring tools.
• Knowledge of Saudi PDPL and NCA Essential Cybersecurity Controls.
• ISO 27001 Lead Implementer/Auditor (preferred).
• PCI‑DSS experience (preferred).
• CEH, OSCP or similar security certifications (preferred).