The consultant will assess and validate the effectiveness of cybersecurity controls against regulatory requirements, security frameworks, and MBSS. They will also manage compliance evidence, support audits, and develop technical reports, dashboards, and policies to ensure ongoing organizational compliance.
Location: remote. Years of Experience: 8-10 years. Project Duration: 2 years. Language Requirements: Fluency in Arabic & English (written and spoken).
We are seeking a Cybersecurity Compliance & Technical Controls Consultant to assess whether cybersecurity controls are implemented effectively and meet applicable regulatory requirements, security frameworks, Minimum Baseline Security Standards (MBSS), and approved configuration baselines. The consultant will conduct technical compliance reviews across infrastructure, cloud, applications, and critical assets; manage audit evidence and remediation tracking; and develop policies, reports, and metrics that support ongoing compliance.
Key Requirements
Experience conducting technical cybersecurity compliance assessments against regulatory requirements, security frameworks, and MBSS.
Ability to assess the implementation and effectiveness of security controls, document gaps, and recommend remediation.
Experience reviewing secure configuration baselines and golden images for servers and endpoints, as well as hardening standards for databases, operating systems, and network devices.
Experience assessing firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM.
Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements.
Ability to review vulnerability assessment and penetration testing results and track related compliance gaps through remediation.
Experience evaluating backup, disaster recovery, and business continuity controls against applicable requirements.
Ability to develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs.
Key Responsibilites
Assess and validate the implementation and eUectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints.
Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets to ensure adherence to security, regulatory, and organizational requirements.
Review and assess security controls and recommend remediation or improvement actions where necessary.
Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions.
Support internal and external audits, including evidence management, findings remediation, and corrective action tracking.
Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed.
Assist in the development and monitoring of compliance-related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders.
Develop, maintain, and review cybersecurity policies, standards, procedures, and controls to support compliance with MBSS and applicable regulatory requirements.
Monitor regulatory and MBSS requirement updates and ensure timely assessment and implementation of new compliance obligations.
Communicate technical and regulatory requirements eUectively to both technical and non-technical stakeholders.
Conduct technical compliance assessments of firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM implementations.
Verify compliance with secure configuration baselines and system hardening standards for servers, databases, operating systems, and network devices.
Evaluate backup, disaster recovery, and business continuity controls to ensure compliance with regulatory, organizational, and MBSS requirements.
Review application security controls and ensure adherence to Secure Software Development Lifecycle (SSDLC) requirements.
Analyze vulnerability assessment and penetration testing results to identify compliance gaps and track remediation activities.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
