Senior Cybersecurity Risk & Resilience Consultant - 2-Year Engagement
A senior consultant on a 2-year remote engagement delivers cybersecurity and technology risk assessments across systems, cloud and third-party services, managing risk registers, treatment plans, KRIs and executive reporting. Core framework knowledge: NCA ECC, SAMA requirements and ISO 27001; fluency in Arabic and English is required.
- Compensation
- Not disclosed
- Location
- Remote
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 8–10 total years of experience
- Fluency in Arabic and English (written and spoken)
- Proven experience in cybersecurity risk and resilience consulting
- Strong experience conducting cybersecurity and technology risk assessments across systems, digital services, cloud environments, and technology projects
- Hands-on experience managing risk registers and the full risk lifecycle (assessment, treatment, acceptance, exceptions, monitoring)
- Experience developing and tracking risk treatment and remediation plans, including control gaps and compensating controls
- Ability to advise on risks related to infrastructure, cloud security, third parties, secure software development, and data protection
- Experience developing or improving cybersecurity risk frameworks, methodologies, risk appetite statements, and KRIs
- Knowledge of NCA ECC, SAMA requirements, and ISO 27001
Full description
Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).
We are seeking a Senior Cybersecurity Risk & Resilience Consultant with 8–10 years of experience to deliver cybersecurity and technology risk assessments and advise on risks across systems, cloud environments, digital initiatives, and third-party services. The consultant will manage risk registers, treatment plans, and exception processes; strengthen risk management frameworks; and provide clear reporting to senior stakeholders. The role requires knowledge of NCA ECC, SAMA requirements, and ISO 27001.
Key Requirements
- 8–10 total years of experience.
- Proven experience in cybersecurity risk and resilience consulting.
- Strong experience conducting cybersecurity and technology risk assessments across systems, digital services, cloud environments, and technology projects.
- Hands-on experience managing risk registers and the full risk lifecycle, including assessment, treatment, acceptance, exceptions, and ongoing monitoring.
- Experience developing and tracking risk treatment and remediation plans, including evaluation of control gaps and compensating controls.
- Ability to advise on risks related to infrastructure, cloud security, third parties, secure software development, and data protection.
- Experience developing or improving cybersecurity risk frameworks, methodologies, risk appetite statements, and key risk indicators (KRIs).
- Knowledge of applicable frameworks and regulations, particularly NCA ECC, SAMA requirements, and ISO 27001.
Key Responsibilities
-
Assist with planning and delivering Risk & Resilience engagements in line with approved methodologies, project plans, and timelines.
-
Perform cybersecurity, technology, and enterprise risk assessments covering customer systems, platforms, digital services, and technology initiatives, as well as regulatory-driven assessments, including NCA compliance activities, and ad hoc risk reviews.
-
Create, maintain, and improve risk registers, tracking risks from identification and assessment through treatment, acceptance, and ongoing monitoring.
-
Develop, track, and report on risk treatment plans, mitigation initiatives, and remediation activities to support timely closure of identified risks and control gaps.