Senior Cybersecurity Risk & Resilience Consultant - 2-Year Engagement

MENA Consultant is seeking a highly skilled Senior Cybersecurity Risk & Resilience Consultant for a 2-year remote engagement. The successful candidate will play a pivotal role in delivering comprehensive technology risk assessments and strengthening the cybersecurity posture of our clients through expert advisory and governance.

Key responsibilities

• Plan and deliver risk and resilience engagements, performing cybersecurity and technology risk assessments across systems, cloud environments, and digital initiatives.
• Manage and maintain risk registers, tracking the full lifecycle of risks from identification through to treatment, acceptance, and ongoing monitoring.
• Develop and track risk treatment plans and remediation activities, ensuring control gaps are addressed effectively.
• Coordinate risk acceptance and exception management processes, including the evaluation of compensating controls and stakeholder engagement.
• Prepare and present detailed risk reports, dashboards, and executive-level insights to senior stakeholders and governance forums.

Requirements

• 8–10 years of professional experience in cybersecurity risk and resilience consulting.
• Proven expertise in conducting risk assessments for cloud security, third-party services, and secure software development.
• Strong knowledge of regulatory frameworks, specifically NCA ECC, SAMA requirements, and ISO 27001.
• Fluency in both Arabic and English, with excellent written and verbal communication skills.
• Demonstrated ability to develop and improve cybersecurity risk frameworks, methodologies, and key risk indicators.

What we offer

• A challenging 2-year project engagement within a professional consulting environment.
• The opportunity to work on high-impact digital transformation and cybersecurity projects.
• Full remote work flexibility, allowing for a global collaboration experience.
• Professional development through access to specialized consulting resources and industry networks.