cybersecurity compliance officer

Anotech

<div>
 
 
 🔐 Hiring: Compliance Officer (Cybersecurity &amp; Governance)
 
 
 
 
 
 
 We are looking for an experienced
 
 Compliance Officer
 
 to lead and strengthen cybersecurity governance, risk, and privacy frameworks within a large-scale national digital ecosystem.
 
 
 
 
 
 
 🎯 What We&rsquo;re Looking For
 
 
 <ul>
 <li>
 Strong experience in cybersecurity governance, compliance &amp; audit
 </li>
 <li>
 Proven expertise in risk management and security frameworks
 </li>
 <li>
 Solid knowledge of privacy regulations (GDPR, HIPAA, FFIEC, PCI, CJIS)
 </li>
 <li>
 Excellent communication &amp; stakeholder management skills
 </li>
 <li>
 Ability to build and drive a cybersecurity practice aligned with international best practices
 </li>
 </ul>
 
 
</div>

Compliance Officer

Saher Management Consultancies LLC

<div>
 Saher Mangement is Hiring for "
 
 Compliance Officer"
 
 
 
 
 JOB
 
 :
 
 Compliance Officer
 
 
 
 
 Location:
 
 
 Doha, Qatar
 
 
 
 
 Job Summary
 
 
 
 The Compliance Officer is responsible for supporting cybersecurity governance, risk management, and regulatory compliance across enterprise systems and operations. The role ensures that security policies, governance frameworks, and operational procedures align with industry standards and regulatory requirements.
 
 
 This position works closely with internal teams, external partners, and regulatory stakeholders to strengthen information security posture, monitor compliance maturity, and implement best practices for cybersecurity governance and risk management.
 
 
 Key Responsibilities Governance and Compliance Management
 
 
 <ul>
 <li>
 Review existing governance models, security frameworks, and operational processes to assess current compliance maturity.
 </li>
 <li>
 Conduct documentation reviews, stakeholder interviews, and operational assessments to establish the current governance landscape.
 </li>
 <li>
 Define target governance maturity levels aligned with industry standards and regulatory expectations.
 </li>
 <li>
 Identify governance gaps and recommend improvements to strengthen security oversight and control mechanisms.
 </li>
 <li>
 Develop and implement governance operating models to enhance security management structures.
 
 
 </li>
 </ul>
 Risk Management and Security Assessment
 
 
 <ul>
 <li>
 Maintain and update the organizational risk register.
 </li>
 <li>
 Identify, analyze, and document cybersecurity risks, vulnerabilities, and threat exposure.
 </li>
 <li>
 Define risk ownership, escalation paths, and risk acceptance processes.
 </li>
 <li>
 Establish risk appetite guidelines and risk mitigation strategies.
 </li>
 <li>
 Conduct threat modeling, vulnerability assessments, and attack path analysis.
 </li>
 <li>
 Develop countermeasures and security controls to mitigate identified risks.
 
 
 </li>
 </ul>
 Security Policy Development and Implementation
 
 
 <ul>
 <li>
 Develop and maintain security policies covering areas such as:
 </li>
 <ul>
 <li>
 Digital Identity Management
 </li>
 <li>
 Information Classification
 </li>
 <li>
 Cloud Security
 </li>
 <li>
 IoT Security
 </li>
 <li>
 Organizational Security Governance
 </li>
 </ul>
 <li>
 Ensure security policies are applied consistently across systems, platforms, and operational processes.
 </li>
 <li>
 Monitor policy adoption and compliance across stakeholders and departments.
 </li>
 <li>
 Align policies with national and international cybersecurity standards.
 
 </li>
 </ul>
 Compliance Framework and Regulatory Alignment
 
 
 <ul>
 <li>
 Align organizational security practices with industry frameworks such as:
 </li>
 <ul>
 <li>
 General Data Protection Regulation
 </li>
 <li>
 Health Insurance Portability and Accountability Act
 </li>
 <li>
 Payment Card Industry Data Security Standard
 </li>
 </ul>
 <li>
 Ensure that information security controls protect the confidentiality, integrity, and availability of data.
 </li>
 <li>
 Support privacy impact assessments and compliance monitoring activities.
 </li>
 <li>
 Collaborate with relevant teams to ensure regulatory compliance and data protection.
 
 </li>
 </ul>
 Security Awareness and Training
 
 
 <ul>
 <li>
 Develop and manage a continuous security awareness program for employees and stakeholders.
 </li>
 <li>
 Define training requirements based on roles and responsibilities across the organization.
 </li>
 <li>
 Design security training modules covering policies, procedures, and cybersecurity best practices.
 </li>
 <li>
 Deliver workshops and awareness sessions to promote a security-first culture.
 
 
 </li>
 </ul>
 Reporting and Continuous Improvement
 
 
 <ul>
 <li>
 Monitor security performance metrics and governance effectiveness.
 </li>
 <li>
 Prepare security compliance reports and risk assessment summaries for leadership.
 </li>
 <li>
 Maintain ongoing visibility of the organization&rsquo;s security posture.
 </li>
 <li>
 Recommend improvements to enhance security frameworks, policies, and operational practices.
 
 
 </li>
 </ul>
 
 Required Skills And Competencies Core Skills
 
 
 
 <ul>
 <li>
 Cybersecurity Governance
 </li>
 <li>
 Risk Management and Risk Assessment
 </li>
 <li>
 Security Policy Development
 </li>
 <li>
 Compliance Monitoring and Audit Support
 </li>
 <li>
 Threat Modeling and Vulnerability Analysis
 </li>
 <li>
 Regulatory Compliance and Privacy Protection
 </li>
 <li>
 Security Awareness Program Management
 
 
 </li>
 </ul>
 Technical Knowledge
 
 
 <ul>
 <li>
 Information Security Frameworks and Standards
 </li>
 <li>
 Data Protection and Privacy Regulations
 </li>
 <li>
 Risk Management Methodologies
 </li>
 <li>
 Security Controls and Governance Models
 
 
 </li>
 </ul>
 Soft Skills
 
 
 <ul>
 <li>
 Excellent communication and presentation skills
 </li>
 <li>
 Strong stakeholder management capabilities
 </li>
 <li>
 Analytical and problem-solving mindset
 </li>
 <li>
 Ability to work collaboratively with cross-functional teams
 </li>
 <li>
 High attention to detail and compliance discipline
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Cybersecurity, Computer Science, IT, or a related field.
 </li>
 <li>
 Professional certifications such as:
 </li>
 <ul>
 <li>
 CISSP
 </li>
 <li>
 CISM
 </li>
 <li>
 CISA
 </li>
 <li>
 ISO 27001 Lead Implementer or Lead Auditor
 </li>
 </ul>
 <li>
 Experience working in regulated environments or cybersecurity governance programs.
 
 </li>
 </ul>
 Tools and Technologies
 
 
 <ul>
 <li>
 Security governance and compliance tools
 </li>
 <li>
 Risk management and audit tracking systems
 </li>
 <li>
 Security monitoring and reporting platforms
 </li>
 <li>
 Documentation and collaboration tools such as SharePoint and Microsoft Teams.
 
 
 </li>
 </ul>
 #ComplianceOfficer#CorporateCompliance #GovernanceRiskCompliance
 
 
 #GRC#RiskManagement#CyberSecurityGovernance#SecurityCompliance
 
 
 #InformationSecurity#SecurityGovernance#SecurityFrameworks
 
 
 #CyberSecurity#ThreatModeling#VulnerabilityManagement#SecurityRiskAssessment
 
 
 #CyberRiskManagement#SecurityOperations#SecurityControls#DataProtection
 
 
 #PrivacyComplianceComplianceOfficer#CyberSecurityGovernance#RiskManagement
 
 
 #GRC#InformationSecurity#GDPR#SecurityCompliance#CyberRiskManagement
 
 
 #EnterpriseRiskManagement#SecurityAudit
 
 
 Skills: risk,compliance,cybersecurity,information security
</div>

Starlink Qatar

<div>
 
 We are seeking a
 
 Compliance Officer
 
 to lead and support cybersecurity, governance, and risk management initiatives across digital platforms and smart solutions. The role will focus on
 
 establishing, monitoring, and improving security and privacy practices
 
 , ensuring alignment with industry standards, international regulations, and organizational objectives. The Compliance Officer will serve as a focal point for all cybersecurity-related tasks, collaborating with internal teams, government stakeholders, and technology partners to build a robust cybersecurity framework and enhance security awareness across all platform operations.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Governance &amp; Audit
 
 
 <ul>
 <li>
 Review and assess existing governance models, structures, and processes; define the baseline for compliance and security engagement activities.
 </li>
 <li>
 Define the targeted level of governance maturity and perform gap analysis against industry frameworks, standards, and models.
 </li>
 <li>
 Identify inconsistencies, overlaps, and gaps in governance structures and processes; map current operations and propose improvements.
 </li>
 <li>
 Develop a
 
 Plan of Action
 
 outlining prioritized activities, deliverables, and milestones to achieve the target state of the security framework.
 </li>
 </ul>
 
 
 Policy Enablement
 
 
 <ul>
 <li>
 Implement and enforce security policies across key areas such as
 
 Digital Identification, Global Security, Information Classification, IoT Security, and Organizational Governance
 
 .
 </li>
 <li>
 Ensure policies are applied consistently to platform use cases and services.
 </li>
 <li>
 Collaborate with technology partners on defining
 
 Cloud-based Security Control Frameworks
 
 to facilitate policy compliance and adoption.
 </li>
 </ul>
 
 
 Awareness &amp; Training
 
 
 <ul>
 <li>
 Develop and maintain an
 
 ongoing security awareness program
 
 for platform operators and key personnel.
 </li>
 <li>
 Assemble and manage the Security Awareness Team, defining roles, responsibilities, and training requirements for stakeholders at all levels.
 </li>
 <li>
 Deliver training content focused on policies, standards, procedures, and best practices to ensure high-level, daily security awareness.
 </li>
 </ul>
 
 
 Risk Management
 
 
 <ul>
 <li>
 Maintain and refresh the
 
 risk register
 
 , identifying points of risk acceptance, escalation paths, and ownership.
 </li>
 <li>
 Establish the organization&rsquo;s
 
 risk appetite
 
 and perform risk identification, analysis, and documentation.
 </li>
 <li>
 Support continuous improvement of security operations by providing guidelines for governance, controls, and situational awareness.
 </li>
 </ul>
 
 
 Privacy &amp; Regulatory Compliance
 
 
 <ul>
 <li>
 Maintain expertise in
 
 regulatory frameworks
 
 such as GDPR, HIPAA, FFIEC, PCI, and CJIS.
 </li>
 <li>
 Map services and processes to these regulations to ensure
 
 information integrity, confidentiality, and availability
 
 .
 </li>
 <li>
 Support privacy-related activities in coordination with incident management to detect unauthorized access, enforce protective measures, and manage potential data leaks.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Excellent interpersonal, communication, and presentation skills.
 </li>
 <li>
 Strong customer orientation and ability to engage multiple stakeholders.
 </li>
 <li>
 Solid understanding of
 
 technology, cybersecurity frameworks, and relevant solutions
 
 .
 </li>
 <li>
 Ability to analyze complex risk and compliance scenarios and provide actionable recommendations.
 </li>
 <li>
 Knowledge of industry best practices in governance, security, privacy, and risk management.
 </li>
 </ul>
</div>

PROZ TECHNOLOGIES

Hello, Greetings from Proztec Qatar! I hope everything is going well with you.We are thrilled to extend multiple exciting job opportunities, and currently, we are hiring for the role of Compliance officerwith one of our prestigious clients in Qatar. Below, you will find details of the role, key responsibilities, and requirements.JOB OVERVIEWJOB TITLE : Compliance officerLOCATION : Doha, QatarGENERAL JOB DESCRIPTIONSeveral advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:&middot; Risk management.&middot; Threats and vulnerabilities modeling.&middot; Attacks path modeling and countermeasures.&middot; Managerial aspects concerning information security.&middot; Assessment of information security effectiveness and degrees of control.&middot; Awareness and Education around security concepts for all stakeholders.&middot; Standards for information security.&middot; Reporting (e.g. disaster recovery and business continuity).&middot; Theoretical and empirical analysis.&middot; Economic aspects of the cybersecurity ecosystem.&middot; Capability modeling.&middot; Liaise with MOTC, Ooredoo and other stakeholders in the project and be the focal point for all cyber security related tasks.Build and drive a successful cyber security practice for Tasmu based on Industry and International best practices in the constantly evolving cyber threat landscape.DUTIES &amp; RESPONSIBILITIESThe Compliance and Audit activity provides the key elements that include:&middot; Review existing governance models, structure, and process: Review documentation, capture existing practices, conduct interviews, draw the current landscape, and define the baseline for the engagement activity.&middot; Define the targeted level of maturity on the governance level.&middot; Perform Gap Analysis: Analyze current organizational governance structures with well-defined industry frameworks, standards, and models &ndash; identify opportunities to strengthen existing methods and structures and/or replace them with new and improved methods.&middot; Define Governance Operating Model: Identifies governance structure inconsistencies, overlaps, and gaps among governance mechanisms and maps current governance processes and structures.&middot; Plan of Action deliverables: Provides a set of deliverables that provide visibility and insights into the engagement activities, current landscape, achievable target state (i.e., desired state to accomplish), prioritized set of actions with milestones, to lead towards the target state to enhance and strengthen the security framework.Policy enablement : &middot; Enable security policies on key aspects such as Digital identification, Global Security, Information Classification, IoT Security, and Organization Governance to improve security based on the emergence of new threats, new technological trends, and national/international regulatory framework evolution.&middot; Ensure that policies are applied on use case and IoT services definition.&middot; Collaborate with Microsoft on the definition of Cloud-based Security Control Framework to ensure and ease the sharing, compliance, and application of policies as well as the follow-up of the adoption of those policies by all TASMU ecosystem's stakeholders.Awareness :The objective of the Awareness activity is to provide training and awareness sessions on information security to TASMU operators/key personnel. This awareness program shall be based on policies, standards, procedures, and best practices previously defined as well as performed in a risk-centric approach to enable TASMU operators to understand the stakes/challenges of cybersecurity within the TASMU program's context.The Awareness program should be conducted as an on-going program to ensure that training and knowledge are not just delivered as an annual activity, rather it is used to maintain a high level of security awareness on a daily basis.&middot; Assemble the Security Awareness Team&middot; Determine Roles for Security Awareness&middot; Identify levels of responsibility (Management, specific roles, and all other personnel)&middot; Establish Minimum Security Awareness and the depth of the security awareness training required for each stakeholder&middot; Determine the content of training and applicabilityRisk Management: The Risk Management activity is including risk identification, analysis, and control. In the frame of security operations phases, the following actions are needed:&middot; Review and refresh the Risk register&middot; Identify points of Risk Acceptance and ownership&middot; Identify paths of Risk Escalation&middot; Establish Risk Appetite&middot; Identify, Analyze &amp; DocumentThe improvements and modernization will provide benefit by: &middot; Providing guidelines for governance security and privacy&middot; Provide a mapping between client controls and industry standards&middot; Ensure that an organization's security policy continues to meet the changing and evolving needs of the underlying business.&middot; Maintain on-going situational awareness of the security state of an organization's network, information systems, and the environments in which those systems operate.Privacy : Extended knowledge with regulatory contexts such as GDPR, HIPAA, FFIEC, PCI, CJIS, etc. and mapping services with respect to protecting the information (integrity, confidentiality and availability) in accordance with these frameworks and with the policies enforced within the TASMU ecosystem (i.e. Information Classification Policy).GDPR knowledge provides a complete approach to compliance, ensuring smooth adoption, and minimizing any future breach risk. Services are broad in scope and cover everything from the initial impact assessment to guidance in the appointment of a Data Protection Officer.The Privacy related activities shall be conducted in agreement with incident management and response activities to be able to identify unauthorized presence before data leaks, apply protective measures and in the worst case, identify and retrieve the data leaked (DLP related controls).SKILLS &amp; ABILITIES&middot; Experience Excellent interpersonal skills&middot; Excellent communication and presentation skills&middot; Customer oriented&middot; Relevant technology skills.&middot; Relevant product and solution skillsIf you are interested and ready to proceed, kindly share your CV in Word format along with the following details:Name:Nationality:Total Experience:Relevant Experience:Current Location:Visa Status:Current Salary:Expected Salary:Notice Period:About Proztec: Proz Technologies (PROZTEC) is a leading ICT specialist firm based in Doha, Qatar (a tax-free country) with over 300 employees. We look forward to the possibility of welcoming you to our growing team.Thanks &amp; regards, Syeda Humera Recruitment Consultant Proz Technologies M: 974-70955929 P: 974-4442-0050 Ext: 109 www.proztec.comJob Type: PermanentPay: QAR10,000.00 - QAR15,000.00 per month

Compliance officer

Booz Allen Hamilton

<div>Cybersecurity Specialist
The Opportunity:
As a cyber professional, you know that understanding adversary tactics, techniques, and procedures is vital to producing the intel that enables the success of customers. At Booz Allen, you can apply your skills and broad knowledge to inform strategies and mitigate the most pressing vulnerabilities. Here, you aren&rsquo;t just deciphering reports. You&rsquo;re telling the story to inform the Department of War's (DoW) most far-reaching cybersecurity decisions.
The Cybersecurity Specialist supports enterprise cybersecurity governance, risk management, compliance, and innovation activities for DoW information systems and networks. This position is responsible for developing cybersecurity strategies, managing the Risk Management Framework (RMF) process, ensuring regulatory compliance, and supporting mission partners with cybersecurity risk mitigation and emerging threat awareness. This position works across multiple cybersecurity functions including Governance, Risk Management Framework (RMF) operations, compliance monitoring, and cyber threat innovation initiatives.
Booz Allen is committed to creating an environment where you can expand your cyber career through mentoring, the opportunity to leverage new resources, and the ability to gain in-demand certifications to sharpen your skill set. With opportunities supporting both the private and public sectors across multiple geographies, your career is only limited by your own appetite for exploration.
Work with us to secure our systems, networks, and crucial infrastructures.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
3+ years of experience with IT operations or cybersecurity</li><li>
Experience in a cybersecurity compliance, operations, or engineering leadership role</li><li>
Experience supporting cybersecurity compliance, audits, or inspections</li><li>
Ability to work with and guide senior leaders, including CISO, CIO, and CTO, and executives to ideate, build, and execute cybersecurity capability maturation</li><li>
Ability to collaborate with project and proposal teams to incorporate cybersecurity solutions and develop high quality implementation plans and roadmaps</li><li>
Ability to author technical documentation, whitepapers, and blogs on leading cybersecurity topics and concepts</li><li>
TS/SCI clearance</li><li>
HS diploma or GED</li><li>
Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification</li></ul>
Nice If You Have:<ul><li>
Experience working defense or national security issues in the Indo-Pacific region, and working at a DoW Command-level Headquarters</li><li>
Experience with NIST 800-53 and DoD 8500/8510</li><li>
Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)</li><li>
Experience selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations</li><li>
Knowledge of the Enterprise Mission Assurance Support Service (eMASS)</li><li>
Knowledge of Mission Partner Engagement (MPE)</li><li>
Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data</li><li>
Ability to analyze cybersecurity policies or governance frameworks</li><li>
Possession of excellent verbal and written communication skills</li><li>
Bachelor's degree</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model 
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.<ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Cybersecurity Specialist

Arab Solutions

<div>
 
 Job Title:
 
 Senior IT Security Consultant / Officer
 
 
 
 Engagement Type:
 
 2-Month Contract
 
 
 
 Location:
 
 Qatar
 
 
 
 Position Overview
 
 
 
 We are seeking a highly experienced
 
 Senior IT Security Consultant / Officer
 
 for a short-term 2-month engagement to support cybersecurity governance, compliance alignment, and operational security enhancement within a governmental environment.
 
 
 The ideal candidate will bring deep expertise in cybersecurity operations, GRC implementation, regulatory compliance (NCSA standards), and hands-on technical security capabilities including SOC coordination, penetration testing, and incident response.
 
 
 
 Key Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 10&ndash;14 years of experience in Cybersecurity
 </li>
 <li>
 8&ndash;10 years of experience in Information Technology and Networks
 </li>
 <li>
 2&ndash;4 years of experience implementing NCSA standards within a governmental entity
 </li>
 <li>
 2&ndash;4 years of experience in Information Security / Cybersecurity operational roles
 </li>
 <li>
 3&ndash;5 years of experience in Governance, Risk &amp; Compliance (GRC)
 </li>
 <li>
 Proven experience with:
 </li>
 <ul>
 <li>
 ISO/IEC 27000
 </li>
 <li>
 ISO 22301
 </li>
 <li>
 Qatar Cybersecurity Framework
 </li>
 <li>
 National Information Assurance
 </li>
 </ul>
 <li>
 Expertise in:
 </li>
 <ul>
 <li>
 SOC monitoring &amp; analysis
 </li>
 <li>
 Penetration Testing
 </li>
 <li>
 Endpoint security analysis
 </li>
 <li>
 Incident response &amp; root cause analysis
 </li>
 </ul>
 <li>
 Fluency in English and Arabic
 </li>
 <li>
 Valid Driving License (Mandatory)
 
 </li>
 </ul>
 
 Required Certifications
 
 
 
 <ul>
 <li>
 Cisco Certified Network Associate
 </li>
 <li>
 ISC2 Cybersecurity Certification (e.g., CISSP, SSCP, etc.)
 </li>
 <li>
 VMware Data Center Virtualization
 </li>
 <li>
 Certified Ethical Hacker
 </li>
 <li>
 ISO 27001 Lead Auditor (Preferred)
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Implement and manage Governance, Risk &amp; Compliance (GRC) processes to ensure regulatory alignment.
 </li>
 <li>
 Lead compliance alignment with ISO 27000 series, ISO 22301, QCSF, and NIA requirements.
 </li>
 <li>
 Conduct penetration testing to identify vulnerabilities across organizational systems.
 </li>
 <li>
 Lead cybersecurity incident response efforts, ensuring rapid containment and recovery.
 </li>
 <li>
 Perform root cause analysis of security incidents and implement corrective actions.
 </li>
 <li>
 Collaborate with SOC teams to enhance monitoring, detection, and incident management capabilities.
 </li>
 <li>
 Review, update, and strengthen cybersecurity policies, procedures, and standards.
 </li>
 <li>
 Support audit readiness, documentation, and regulatory reporting activities.
 
 
 </li>
 </ul>
 Skills: ncsa standards,ethical hacker,cybersecurity,grc,cissp,nia requirements,soc monitoring,analysis,iso 22301,sscp,qcsf
</div>

Senior IT Security Consultant / Officer

Genesee County MI

<div>
 
 Salary: $56.7288 Hourly ($117,996)
 
 
 
 
 Minimum Qualifications
 
 
 
 Ten (10) years' progressive professional IT experience
 
 -AND-
 
 five (5) years' professional experience in cybersecurity, including leadership responsibilities
 
 -AND-
 
 five (5) years' experience in enterprise risk management, security auditing and compliance oversight
 
 -AND-
 
 five (5) years' experience supervising or managing IT and/or cybersecurity staff.
 
 
 Equivalent combinations of education and experience may be considered.
 
 
 
 Desired Certifications
 
 
 
 Experience in public sector or governmental environments preferred.
 
 
 Certified Information Systems Security Professional (CISSP)
 
 
 Certified Information Security Manager (CISM)
 
 
 Certified Information Systems Auditor (CISA)
 
 
 Certified in Risk and Information Systems Control (CRISC)
 
 
 GIAC certifications
 
 
 Other relevant advanced cybersecurity certifications
 
 
 
 Special Requirements
 
 
 
 Must be willing to work irregular hours, nights and weekends in response to cybersecurity incidents.
 
 
 Must obtain and maintain certifications as determined by the CIO.
 
 
 Will be required to pass background and security clearance checks.
 
 
 
 Physical Requirements
 
 
 
 Must be able to perform Essential Job Duties and Functions with or without reasonable accommodations.
 
 
 
 Job Summary
 
 
 
 The Chief Information Security Officer (CISO) is responsible for establishing, leading and continuously improving Genesee County's enterprise information security and risk management program. This executive leadership role provides strategic direction and governance for cybersecurity, data protection, regulatory compliance, business continuity and technology risk management across all County departments and offices.
 
 
 The CISO develops and implements a comprehensive, county-wide security strategy aligned with business objectives, legal requirements and industry best practices. The position is appointed by and reports to the Chief Information Officer and works closely with County leadership, elected officials, department heads and external partners.
 
 
 
 Essential Job Duties And Functions
 
 
 
 
 Strategic Leadership &amp; Governance
 
 
 
 <ul>
 <li>
 Develops and executes a comprehensive enterprise cybersecurity strategy and roadmap.
 </li>
 <li>
 Establishes a county-wide information security governance framework.
 </li>
 <li>
 Advises the CIO, County leadership and elected officials on cybersecurity risks, threats and mitigation strategies.
 </li>
 <li>
 Provides executive-level reporting on risk posture, security incidents, compliance status and emerging threats.
 </li>
 <li>
 Leads the development of long-term cybersecurity investment and budget planning.
 
 
 </li>
 </ul>
 
 Risk Management &amp; Compliance
 
 
 
 <ul>
 <li>
 Establishes and maintains a formal enterprise risk management framework for cybersecurity.
 </li>
 <li>
 Oversees security audits, risk assessments and vulnerability management programs.
 </li>
 <li>
 Ensures compliance with applicable federal, state and local regulations and standards.
 </li>
 <li>
 Develops, maintains and enforces information security policies, standards and procedures.
 </li>
 <li>
 Coordinates third-party risk management and vendor security reviews.
 
 
 </li>
 </ul>
 
 Security Architecture &amp; Operations
 
 
 
 <ul>
 <li>
 Provides executive oversight of county IT architecture, infrastructure security and data protection strategies.
 </li>
 <li>
 Ensures security measures are integrated into system design, development, procurement and implementation processes.
 </li>
 <li>
 Oversees implementation and management of security technologies including firewalls, VPNs, endpoint protection, identity and access management and data loss prevention.
 </li>
 <li>
 Ensures appropriate security controls are embedded in new systems, networks and data center initiatives.
 
 
 </li>
 </ul>
 
 Incident Response &amp; Resilience
 
 
 
 <ul>
 <li>
 Leads the County's cybersecurity incident response program.
 </li>
 <li>
 Directs response efforts for security breaches, threats and cyber incidents.
 </li>
 <li>
 Oversees development and testing of disaster recovery and business continuity plans.
 </li>
 <li>
 Coordinates with law enforcement, regulatory bodies, insurance carriers and external cybersecurity partners as needed.
 
 
 </li>
 </ul>
 
 Program &amp; Operational Management
 
 
 
 <ul>
 <li>
 Ensures the internal IT security framework operates effectively while supporting business needs across departments.
 </li>
 <li>
 Evaluates new initiatives and projects for security architecture alignment and risk mitigation.
 </li>
 <li>
 Leads security-related change management and stakeholder education initiatives.
 </li>
 <li>
 Establishes cybersecurity awareness and training programs for all County employees.
 </li>
 <li>
 Develops and tracks key performance indicators (KPIs) and key risk indicators (KRIs) for cybersecurity performance.
 
 
 </li>
 </ul>
 
 Leadership &amp; Supervision
 
 
 
 <ul>
 <li>
 Builds and leads a high-performing cybersecurity team.
 </li>
 <li>
 Fosters a culture of security awareness and accountability across the organization.
 </li>
 <li>
 Works collaboratively with department leadership to balance security, usability and operational efficiency.
 
 
 </li>
 </ul>
 
 Please See The Attached Job Description For More Details.
 
 
 
 
 
 Job Posted by ApplicantPro
 
 
</div>

CHIEF INFORMATION SECURITY OFFICER (IT)

Search 10000+ Cybersecurity compliance officer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 cybersecurity compliance officer jobs Near Me

Compliance Officer

Compliance Officer

Compliance Officer

Compliance officer

Cybersecurity Specialist

Senior IT Security Consultant / Officer

CHIEF INFORMATION SECURITY OFFICER (IT)