Cyber Security SGM

About Abdul Latif Jameel

Abdul Latif Jameel (ALJ) is a diversified conglomerate with a strong presence across the Middle East, North Africa, and Turkey (MENAT region). With deep-rooted business networks and long-standing relationships, ALJ serves as a strategic partner, facilitating growth and expansion for businesses seeking opportunities in the region. Our reputation is built on trust, forged through partnerships with globally recognized brands that rely on our expertise and commitment to delivering mutually beneficial outcomes. Over the past 75 years, ALJ has evolved from a modest trading enterprise in Jeddah, Saudi Arabia, into a regional powerhouse, establishing the largest vehicle distribution network in the Kingdom and expanding into diverse sectors that contribute to the ‘infrastructure of life’ across MENAT.

Purpose of the Role

The Head of Cybersecurity (Senior General Manager) at ALJ Motors will lead the cybersecurity function, ensuring the protection of the organization’s information assets, digital services, and critical business operations. This strategic leadership role is responsible for establishing and maintaining a robust cybersecurity governance framework, driving the cybersecurity strategy and roadmap, and managing cyber risks to align with business priorities, enterprise strategy, and regulatory obligations. The role ensures the organization maintains a strong cybersecurity posture, fosters a resilient cybersecurity culture, and provides governance over cybersecurity incidents while enabling secure digital transformation.

Key Responsibilities

The Head of Cybersecurity will oversee the following core areas:

• Cybersecurity Strategy, Governance, and Risk Management: Develop, implement, and maintain a comprehensive cybersecurity strategy aligned with business objectives. Establish governance frameworks, policies, and standards to ensure compliance with legal and regulatory requirements while managing cyber risks effectively.
• Cybersecurity Operations Oversight and Resilience Management: Oversee day-to-day cybersecurity operations, ensuring robust incident detection, response, and recovery capabilities. Monitor and enhance the organization’s cyber resilience to mitigate potential threats and minimize operational disruptions.
• Secure Business Enablement and Integration: Collaborate with business units to integrate cybersecurity best practices into digital transformation initiatives. Ensure that all projects and initiatives undergo rigorous cybersecurity reviews prior to implementation to safeguard organizational assets.
• Cybersecurity Awareness, Culture, and Stakeholder Engagement: Promote a strong cybersecurity culture across the organization by raising awareness, providing training, and fostering collaboration among stakeholders. Engage with leadership and employees to ensure cybersecurity remains a shared responsibility.
• Cybersecurity Leadership, Capability Development, and Assurance Management: Lead and mentor the cybersecurity team, driving capability development and ensuring the organization remains equipped to address evolving cyber threats. Conduct regular assessments to measure cybersecurity maturity and identify areas for improvement.

Collaborative Operating Model

The Head of Cybersecurity will work closely with ALJ Motors Cybersecurity, Corporate Cybersecurity, Motors IT, JTECH, and other approved service providers, adhering to the approved Cybersecurity Governance Model and RACI Matrix. While Corporate Cybersecurity provides enterprise-level strategy, standards, and shared services, the Head of Cybersecurity retains accountability for cybersecurity governance, risk management, regulatory compliance, and business-specific cybersecurity activities within ALJ Motors. This role ensures effective collaboration, alignment, and clear accountability between ALJ Motors and Corporate Cybersecurity.

Key Performance Indicators

The success of this role will be measured by the following performance indicators:

• Percentage completion of cybersecurity strategic roadmap initiatives.
• Percentage of cybersecurity policies and standards reviewed and updated within schedule.
• Number of overdue cyber risks in the Cyber Risk Register.
• Percentage of identified cyber risks with approved treatment plans.
• Regulatory and compliance audit pass rate.
• Year-over-year improvement in cybersecurity maturity score.
• Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) for cybersecurity incidents.
• Percentage of critical vulnerabilities remediated within Service Level Agreements (SLAs).
• Endpoint protection coverage rate and Identity and Access Management compliance rate.
• Cyber recovery testing success rate and number of major cybersecurity incidents impacting business operations.
• Percentage of projects undergoing cybersecurity review prior to implementation.

Qualifications and Experience

Candidates for this role should possess a minimum of 15 years of progressive experience in cybersecurity, with at least 5 years in a senior leadership position. A strong background in cybersecurity strategy, governance, risk management, and compliance is essential. Relevant certifications such as CISSP, CISM, or CRISC are highly desirable. The ideal candidate will have a proven track record of leading cybersecurity initiatives in a large, diversified organization and a deep understanding of the unique challenges and opportunities in the MENAT region.