Cyber Security - GRC Specialist

About the role

You will join a Cyber Technology Consulting practice to help leading organisations across the Middle East design, implement and improve cybersecurity governance, technology risk and regulatory compliance programmes. Working closely with senior consultants, managers and client stakeholders, you will translate regulatory obligations into practical security controls and governance frameworks.

Key responsibilities

• Deliver cybersecurity and technology risk consulting engagements across multiple industries.
• Conduct risk assessments for applications, infrastructure, cloud environments and business processes.
• Analyse regulatory circulars, standards and guidelines to identify applicable cybersecurity obligations.
• Perform governance, compliance, maturity and control‑effectiveness assessments against industry standards.
• Develop and review cybersecurity policies, standards, procedures and supporting documentation.
• Support clients in building compliance monitoring, risk‑management and assurance programmes.
• Execute gap assessments and create remediation road‑maps aligned with leading frameworks.
• Assist with business continuity, disaster recovery and operational resilience assessments.
• Prepare detailed reports, executive presentations and management summaries for technical and business audiences.
• Facilitate workshops, interviews and working sessions with technology, security, risk and business teams.
• Manage multiple engagements, ensuring timely delivery and quality assurance.
• Mentor junior team members and contribute to practice knowledge sharing.

Required profile

• Consulting background at consultant, senior consultant or assistant manager level.
• Hands‑on experience implementing enterprise cyber risk and governance programmes.
• Strong understanding of cybersecurity governance, technology risk management and risk‑assessment methodologies.
• Ability to interpret regulatory requirements and translate them into actionable security controls.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑53

What we offer

• Opportunity to work with senior leadership across diverse industries.
• Exposure to high‑impact cybersecurity projects in the Middle East.
• Professional development and mentorship within a leading consulting practice.