Senior Cybersecurity Risk

Candidates strictly with one month notice periodSingle benefitJOB DESCRIPTIONSenior Cybersecurity Risk & Compliance ConsultantJob InformationJob Title: Senior Cybersecurity Risk & Compliance ConsultantDepartment: Information SecuritySection: IT Security & Risk ManagementReports To: Head of SectionLocation: Dubai United Arab EmiratesEmployment Type: Full-Time Fixed-Term ContractJob Grade: GradeJob Code: CodeJob PurposeThe Senior Cybersecurity Risk & Compliance Consultant will lead cybersecurity governance risk management regulatory compliance and audit readiness while providing technical security oversight across IT projects applications infrastructure cloud environments networks and third-party solutions.

The role requires a strong combination of cybersecurity Governance Risk & Compliance GRC expertise and technical security knowledge to conduct security architecture reviews technical risk assessments control effectiveness evaluations and compliance assessments. The consultant will work closely with IT cybersecurity managed services business stakeholders vendors auditors and external consultants to ensure that technology initiatives meet organizational security requirements and applicable regulatory obligations.

Key Responsibilities
A. Cybersecurity Governance Risk & ComplianceImplement and maintain cybersecurity governance practices aligned with applicable UAE regulatory requirements including DESC Information Security Regulation ISR ISO 27001 NIST and organizational security policiesConduct cybersecurity risk assessments for applications infrastructure networks cloud services technology projects vendors and significant IT changesIdentify evaluate document and track inherent and residual risks control gaps remediation actions risk owners and target closure datesDevelop risk treatment plans and manage security exceptions formal risk acceptances compensating controls and periodic reviews of accepted risksMaintain risk registers and supporting evidence within enterprise GRC platforms such as RSA Archer or equivalent solutionsMonitor remediation progress and escalatereward overdue high and critical risks to management and relevant governance committeesB.

Technical Security Reviews & Risk AssessmentsConduct technical security reviews of solution architectures high-level and low-level designs implementation plans and technology proposals before deploymentAssess security risks associated with on-premises infrastructure networks operating systems databases web applications APIs cloud platforms identity and access management and security technologiesReview technical configurations access controls authentication mechanisms encryption network segmentation logging and monitoring vulnerability management endpoint protection and data protection controlsEvaluate technical security assessment reports vulnerability assessment and penetration testing findings and remediation plansReview cloud and SaaS solutions system integrations third-party connectivity data flows hosting arrangements and data residency requirements against applicable security and regulatory obligationsAssess security requirements for technology procurement software and hardware acquisitions infrastructure changes and new implementationsIdentify security design weaknesses misconfigurations control deficiencies and compliance gaps and recommend practical remediation measures and compensating controlsVerify that security requirements are addressed before go-live and ensure unresolved risks are appropriately mitigated or formally accepted by authorized stakeholdersC.

Security Architecture & Project AssuranceAct as a cybersecurity advisor to IT and business projects ensuring that security requirements are incorporated from the design and planning stagesReview proposed solutions against approved security architecture technology standards cybersecurity policies and regulatory requirementsEvaluate the effectiveness and suitability of security controls and technologies including firewalls Web Application Firewalls WAF Endpoint Detection and Response EDR Data Loss Prevention DLP Privileged Access Management PAM Identity Governance security monitoring and encryptionCollaborate with infrastructure network cloud application operations and managed services teams to address security gaps and improve control implementationProvide documented security review findings recommendations conditions for approval and risk-based implementation guidanceD.

Policy Standards & Control ManagementDevelop review and maintain cybersecurity policies standards procedures and Standard Operating Procedures SOPsTranslate regulatory and framework requirements into implementable technical and operational security controlsConduct periodic control assessments to evaluate control design implementation and operating effectivenessIdentify opportunities to strengthen cybersecurity processes improve control maturity and address recurring audit and risk findingsQualifica