Job Title: Senior Cybersecurity Risk and Compliance Consultant
Experience: 10+ Years in Information Security Management Systems
Location: Oman
Work Mode: On-Site
Employment Type: Full-Time

JOB BRIEF

One of our esteemed client is seeking a Senior Cybersecurity Risk and Compliance Consultant to strengthen the security framework and ensure compliance with industry standards. In this role, you will lead risk assessments, cybersecurity advisory services, and compliance initiatives.
You will work closely with various teams to enhance security governance and manage cybersecurity risks effectively.

QUALIFICATIONS

Education: Bachelor’s or Master’s in Cybersecurity, IT, or a related field.

Technical Skills:

• Expertise in ISO 27001 and COBIT frameworks.
• Proficiency in cybersecurity governance, risk, and compliance (GRC) tools.
• Strong understanding of IT architecture, network security, and risk management.
• Experience with cybersecurity operations, including SIEM, threat intelligence, and incident response.
• Familiarity with TCP / IP, UDP, and other network protocols.
• Ability to identify threats, vulnerabilities, and mitigation strategies.

Certifications (Mandatory):

• ISO 27001:2022 Lead Implementer
• Certified in Risk and Information Systems Control (CRISC)

Preferred Certifications:

• Certified Information Security Manager (CISM), ITIL, COBIT, NIST, or equivalent.

Soft Skills:

• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to build relationships with top management and colleagues.
• Experience in leading cybersecurity workshops.
• Capability to work independently with minimal supervision.

• Conduct compliance assessments and cybersecurity risk evaluations.
• Implement and maintain Information Security Management Systems (ISMS).
• Ensure legal, statutory, and regulatory compliance.
• Perform cybersecurity third-party and vendor assessments.
• Manage cybersecurity risk tools and generate reports.
• Improve and streamline cybersecurity risk and compliance processes.
• Create and update compliance dashboards and critical process documentation.
• Provide cybersecurity advisory services to internal teams.
• Act as a focal point for cybersecurity risk and compliance initiatives.
• Oversee governance documents and manage step-out and deviation processes.