Head of Reliability, Trust & Security

Trust, reliability and security start with you. You build an organisation where security, reliability and compliance are the default path. You own Echelon’s environment and the standards that everyone building in it works to, and you build the function around you as the company grows, across both our internal operations and our customer engagements.

• Environment ownership: Echelon owns its cloud accounts, identity, keys and source code. Everyone who builds in the environment, internal or external, works under Echelon’s access controls, and a clean separation path exists for any partner.

• Security: Security engineering, application and cloud security, identity and access, detection and response, and vulnerability management.

• Resilience & reliability: Incident management, disaster recovery and business continuity. You define the availability, recovery and observability standards our engineers and partners build to, and verify they are met.

• Trust & compliance: Governance, security, and privacy compliance, anchored primarily in Saudi regulatory standards (PDPL, NCA ECC-2:2024, NDMO data residency regulations, and SDAIA guidelines). GDPR serves as our global baseline for privacy, with SOC 2 implemented strictly on a customer-demand basis. Encompasses audit readiness, enterprise risk management, third-party risk oversight, and customer trust assurance.

• Data & secure channels: Where Echelon’s own data and customer data live: classification, segregation, encryption and retention across the whole environment, and secure file exchange and communication channels for sensitive information, internally and with customers.

• Regulator & customer liaison: The named Echelon contact for NCA and for SDAIA/NDMO. Security questionnaires, contractual security and residency clauses, and our customer-facing trust posture.

• Strategy & leadership: Define and own a multi-year strategy and roadmap, built for scale, across infrastructure, security, resilience and trust, tied to business goals. Lead this agenda internally and externally. Act as the accountable executive for security and availability, reporting risk posture and progress to the executive team and the board. Report to the Managing Director and work closely with the Chief Operating Officer.
  
  Sit on the Crisis Management Team and lead the technical and data‑protection workstream in any incident. Build the certifications and policies that make Echelon known, internally and externally, as a highly reliable and highly trusted organisation for our employees, partners and customers, operating to the highest security standards.

• Security: Lead a security programme built on zero‑trust principles, covering cloud, application, identity, data and endpoint security across the corporate environment and the products and systems built by our engineers, our partners and our customers. Embed security into the software lifecycle: shift‑left, secure by default and supply‑chain security. Own threat detection, incident response and vulnerability management, including security for AI and LLM‑powered features, and AI data governance: AI data‑use rules, KSA residency for AI processing and approval of AI use cases.
  
  Build the systems and processes that prevent incidents and read signals of weakness early.

• Resilience & reliability: Define the availability, recovery and observability standards our engineers and partners build and verify they are met. Own disaster recovery and business continuity plans, with regular tested exercises. Lead the response to major incidents and communicate clearly with customers and leadership.

• Trust & compliance: Achieve and maintain the certifications and regulatory compliance our markets…