Cyber Security Engineer

About the role

Dar is seeking a Cyber Security Engineer to support the implementation and continuous improvement of its Information Security Management System (ISMS) across all offices. The role will ensure alignment with ISO/IEC 27001:2022 and other relevant cybersecurity standards while collaborating with both technical and business stakeholders.

Key responsibilities

• Implement, maintain and continuously improve Dar’s ISMS across all locations in line with ISO/IEC 27001:2022.
• Develop, update and enforce cybersecurity policies, standards, procedures and guidelines.
• Conduct cybersecurity risk assessments for projects, systems, SaaS solutions, clients and suppliers.
• Maintain risk registers, track treatment plans and oversee remediation activities.
• Support internal, external, certification and surveillance audits.
• Perform compliance and control assessments based on ISO 27001, ISO 27002 and CIS Controls.
• Carry out third‑party and supplier cybersecurity assessments and monitor audit findings to closure.
• Prepare regular cybersecurity reports, KPIs and management updates.
• Assist with cybersecurity awareness and training initiatives.

Required profile

• Bachelor’s degree in Computer Science, Engineering, IT, Cybersecurity or a related field.
• 5–10 years of experience in cybersecurity, primarily within Governance, Risk and Compliance (GRC).
• Strong written and verbal English communication skills and ability to work with diverse stakeholders.
• Professional certifications such as CISSP, CISM, CRISC or ISO 27001 are a plus.

Required skills

• In‑depth knowledge of ISO/IEC 27001 and ISO/IEC 27002 standards.
• Familiarity with CIS Controls.
• Experience conducting cybersecurity risk assessments and maintaining risk registers.
• Proficiency in performing security audits and third‑party supplier assessments.
• Ability to develop and update security policies, standards, procedures and guidelines.