Senior Lead - IT Security Delivery

Role Overview

Senior Lead - IT Security Delivery at Qiddiya Investment Company. This role owns build readiness, testing orchestration, and controlled handover for IT Security programs across corporate and asset environments, coordinating with Design teams and enforcing delivery gates.

Role Purpose

Own build readiness, testing orchestration, and controlled handover, coordinating with the Design team for inputs. Enforce gates, close defects, and produce audit-ready validation packs for assigned programs across corporate and asset IT Security programs.

Key Responsibilities

Readiness Governance and Gates

• Operate exit-gate governance across environments; verify prerequisites including access, certificates, backups, and rollback procedures.
• Supervise Go/No-Go forums and ensure documentation of risks, exceptions, and compensating controls with Cybersecurity sign-off.
• Maintain change calendars aligned to asset windows and blackout periods.

Test Planning, Data, and Environments

• Supervise the build of end-to-end test plans covering functional, negative, resilience, and integration scenarios.
• Ensure observer participation from Operations and platform subject matter experts for test credibility.

Defect, Risk, and Issue Management

• Manage defect triage; assign owners and severity levels; track fix SLAs and re-tests.
• Maintain RAID logs; escalate blockers; quantify residual risk at release.

Validation Packs and Traceability

• Supervise compilation of validation packs including plans, results, evidence, and traceability matrices; ensure versioned storage and approvals.
• Ensure achievement of first-pass acceptance by QA and Excellence teams; ensure quick resolution of returns.

Handover and Run Readiness

• Validate runbooks, monitoring and alerting configuration, and L1/L2 training completion; confirm operational SLOs and disaster recovery artifacts.
• Confirm SIEM and SOAR mappings and case workflows prior to go-live.

Stakeholder Coordination and Communications

• Facilitate cutover rehearsals; publish communications plans, RACI matrices, and hyper-care schedules.
• Provide weekly readiness dashboards and risk summaries to governance forums.

Security Control Evaluation, POC, and Implementation

• Lead the evaluation of IT Security controls, technologies, and solutions to ensure alignment with organizational strategy, Cybersecurity requirements, business priorities, and operational needs.
• Oversee Proof of Concept activities, including scope definition, success criteria, stakeholder alignment, execution oversight, and outcome reporting.
• Assess solution suitability based on security effectiveness, integration capability, scalability, compliance alignment, operational impact, supportability, and long-term value.
• Recommend fit-for-purpose IT Security controls and technology solutions based on outcomes, risk reduction value, operational readiness, and enterprise direction.

Continuous Improvement

• Track change success rate and update checklists accordingly.

Qualifications & Experience

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent from a recognized and accredited university is required.
• Master's degree in Computer Science, Cybersecurity, or equivalent from a recognized and accredited university is preferred.
• 6-8 years in a relevant industry, preferably with the majority in IT Security delivery across corporate and asset environments.