Cybersecurity Architect

About the Company

Muhlah is a fintech organization dedicated to providing accessible micro-financing solutions to a broad customer base. The company emphasizes cutting-edge technology to offer quick, transparent, and user-friendly financial services. It operates under the oversight of the Saudi Central Bank, holding an official regulatory license (No. 105/أش/202509).

Role Overview

This full-time, on-site Cybersecurity Architect role based in Riyadh entails designing and maintaining secure system architectures for Muhlah's micro-financing platforms. The architect ensures compliance with industry-leading security standards and regulatory mandates. Daily duties include security risk assessments, defining protection measures, and collaborating closely with engineering and product teams to embed security in both application and infrastructure designs. The role involves auditing existing network and application security setups, spearheading threat modeling and security evaluations, and proposing enhancements to protect the organization's data and systems effectively.

Additional Responsibilities

• Participate in incident response planning and execution.
• Create and maintain comprehensive security documentation.
• Continuously improve the cybersecurity posture of the organization.

Qualifications

• Proven expertise in Security Architecture Design and cybersecurity strategies.
• Experience in Application Security focused on secure development and vulnerability reduction.
• Knowledge in Network Security and broader Information Security to ensure secure network architecture and data safety.
• Background in fintech, financial services, or regulated sectors, with familiarity with Saudi Arabian and international security standards.
• Competence with security frameworks such as ISO 27001 and NIST, along with risk evaluation techniques suited for both cloud and on-premises environments.
• Exceptional analytical, problem-solving, and communication abilities, with experience mentoring technical teams on security-related topics.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent disciplines.
• Mandatory professional credentials such as TOGAF or SABSA certification.
• Fluency in English, both written and verbal.