cybersecurity compliance specialist

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Security Control Assessor &ndash; Job Description</h1>
Position Title: Security Control Assessor 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Overview</h2>
The Security Control Assessor (SCA) shall provide cybersecurity assessment, authorization, and compliance support services for the U.S. Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Conduct independent security control assessments in accordance with NIST SP 800-53 Rev. 5 and NIST SP 800-53A methodologies.</li><li>
Evaluate management, operational, and technical security controls for federal information systems and cloud environments.</li><li>
Support the SBA Risk Management Framework (RMF) lifecycle including assessment, authorization, continuous monitoring, and ongoing authorization activities.</li><li>
Develop and maintain Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, risk findings, and remediation recommendations.</li><li>
Review and validate cybersecurity documentation including System Security Plans (SSPs), Configuration Management Plans (CMPs), Incident Response Plans, ISCPs, and architecture diagrams.</li><li>
Perform vulnerability assessment validation activities and verify remediation efforts for identified weaknesses and deficiencies.</li><li>
Support Information System Continuous Monitoring (ISCM) activities and ongoing authorization (OA) evaluation support.</li><li>
Assess compliance with FISMA, OMB Circular A-130, NIST guidance, FedRAMP requirements, and agency-specific cybersecurity policies.</li><li>
Support audit readiness activities for Inspector General (IG), GAO, FISMA, and internal cybersecurity audits.</li><li>
Assist with High Value Asset (HVA) assessment support activities in alignment with CISA and OMB guidance.</li><li>
Coordinate with ISSOs, ISSMs, system owners, and engineering teams to evaluate cybersecurity risks and remediation strategies.</li><li>
Support enterprise vulnerability management and risk reporting activities.</li><li>
Participate in cybersecurity governance meetings, compliance reviews, and technical assessment briefings.</li><li>
Document assessment findings, technical analysis, and recommendations with clear and concise reporting suitable for executive and technical stakeholders.</li><li>
Support development of cybersecurity metrics, dashboards, and compliance reporting artifacts.</li><li>
Ensure all assessment deliverables are peer reviewed, Section 508 compliant, and delivered in accordance with SBA-defined quality standards and timelines.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or related field.</li><li>
Minimum of six (6) years of experience supporting federal cybersecurity assessment, compliance, RMF, or security authorization activities.</li><li>
Minimum of four (4) years of experience conducting security control assessments, vulnerability assessments, or cybersecurity compliance evaluations.</li><li>
Demonstrated expertise in NIST RMF processes, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA compliance requirements.</li><li>
Experience developing Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, and related accreditation documentation.</li><li>
Experience supporting continuous monitoring, ongoing authorization (OA), and cybersecurity audit activities.</li><li>
Knowledge of FedRAMP security assessment and continuous monitoring requirements.</li><li>
Experience using cybersecurity assessment, vulnerability management, and governance/risk/compliance (GRC) tools.</li><li>
Strong analytical, technical writing, and communication skills.</li><li>
Relevant cybersecurity certifications such as CAP, CISSP, CISA, Security+, CEH, or equivalent preferred.</li><li>
Ability to obtain and maintain a Moderate Risk background investigation and eligibility for higher-level clearances if required.</li></ul><h2 class="jobSectionHeader">
Desired Experience</h2><ul><li>
Experience supporting civilian federal agencies such as SBA, DHS, or CISA.</li><li>
Experience supporting FedRAMP cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.</li><li>
Experience supporting enterprise cybersecurity metrics, dashboards, and automated compliance reporting.</li></ul>
PZHe7BkzAJ</div>

SBA - Security Control Assessor

Snoonu

<div>
 
 🚀 Welcome to Your Next Adventure!
 
 
 
 We are looking for a Security Compliance Officer who will take an active role in coordinating and leading security audits, while supporting the overall compliance program. This role focuses on ensuring that company policies, procedures, and controls align with regulatory requirements and industry standards.
 
 
 
 🛠 What You&rsquo;ll Get Your Hands On
 
 
 
 <ul>
 <li>
 Coordinate and lead security audits (e.g., ISO 27001, PCI DSS, regulatory audits)
 </li>
 <li>
 Act as the main point of contact for auditors and internal stakeholders during audits
 </li>
 <li>
 Collect, review, and organize audit evidence to ensure completeness and accuracy
 </li>
 <li>
 Track audit findings, non-conformities, and remediation actions to closure
 </li>
 <li>
 Support the implementation and maintenance of security policies, procedures, and controls
 </li>
 <li>
 Ensure compliance with relevant regulations and standards (e.g., ISO 27001, Data protection laws)
 </li>
 <li>
 Maintain compliance trackers, risk registers, and audit documentation
 </li>
 <li>
 Support vendor risk assessments and third-party compliance reviews
 </li>
 <li>
 Follow up with internal teams to ensure timely completion of compliance tasks
 </li>
 <li>
 Support awareness and communication related to security policies and compliance requirements
 
 
 </li>
 </ul>
 
 🧙&zwj;&male;️ The Magic You Bring
 
 
 
 <ul>
 <li>
 1&ndash;3 years of experience in cybersecurity, risk, or compliance
 </li>
 <li>
 Hands-on experience supporting or coordinating security audits
 </li>
 <li>
 Basic understanding of security frameworks (e.g., ISO 27001, PCI-DSS)
 </li>
 <li>
 Familiarity with GCC regulations (e.g., Qatar PDPPL, Kuwait CITRA)
 </li>
 <li>
 Strong organizational and project coordination skills
 </li>
 <li>
 Ability to manage multiple stakeholders and follow up effectively
 </li>
 <li>
 Experience working with documentation, evidence collection, and tracking tools
 </li>
 <li>
 Good communication skills (written and verbal)
 
 
 </li>
 </ul>
 
 ✨ Bonus Points If You Have
 
 
 
 <ul>
 <li>
 Familiarity with GRC tools
 </li>
 <li>
 Basic understanding of cloud environments (AWS, GCP)
 </li>
 <li>
 Relevant certifications or progress toward them (e.g., ISO 27001 Foundation/Lead Implementer, Security+, CISA, or similar)
 
 
 </li>
 </ul>
 
 Inside Snoonu&rsquo;s Universe
 
 
 
 Snoonu is Qatar&rsquo;s homegrown Super App, reinventing daily life with blazing-fast delivery, shopping, and more &ndash; all in one place. Powered by tech, driven by a global team, and obsessed with making life easier.
 
 
 
 The Dream We&rsquo;re Chasing
 
 
 
 To be the first Qatari Ultra App that propels the region and its community through innovation and technology. We have global ambitions where what we do surpasses norms and limitations every time.
 
 
 
 The Quest We&rsquo;re On
 
 
 
 To radically transform how people live by leveraging technology to connect them with endless possibilities.
 
 
 
 Our Everyday Superpowers
 
 
 
 
 👥 Be Customer Obsessed
 
 : &ldquo;Focus on the customer and all else will follow.&rdquo;
 
 
 
 💪 Act with Integrity:
 
 &ldquo;We are honest, ethical, and trustworthy in everything we do.&rdquo;
 
 
 
 🧪 Be Curious and Creative:
 
 &ldquo;We constantly innovate and create solutions to bring a lasting positive impact.&rdquo;
 
 
 
 🏅Lead by Example and Take Ownership:
 
 &ldquo;Be the change you want to see and take ownership.&rdquo;
 
 
 
 🚀 Work Smart and Deliver Results
 
 : &ldquo;You can do more by doing less, better, and faster.&rdquo;
 
 
 
 👨&zwj;💼 It's All About People:
 
 &ldquo;Be a team player; together we are stronger.&rdquo;
 
 
 
 Perks &amp; Worklife Magic At Snoonu
 
 
 
 
 🌐 Global Vibes
 
 &ndash; Collaborate with a worldwide crew.
 
 
 
 🧠 Brain Boosters
 
 &ndash; Learning budgets, access to courses, and tools for your growth.
 
 
 🚒
 
 Builder&rsquo;s Playground
 
 &ndash; Own your tasks, own your path! We&rsquo;re big on autonomy.
 
 
 🏝️
 
 Flexible Time Off
 
 &ndash; We take recharging seriously. Generous leave and wellness policies.
 
 
 🛠️
 
 Agile Everything
 
 &ndash; Scrum isn&rsquo;t a buzzword here. It&rsquo;s how we roll, from product to ops.
 
 
 
 Great Place to Work&reg; Certified
 
 
 
 We&rsquo;re certified as a Great Place to Work&reg;, a recognition that celebrates a culture we&rsquo;ve built together where people come first, always. This certification reflects our commitment to creating a workplace where everyone feels valued, empowered, and inspired to do their best work.
 
 
 
 Certified for Excellence
 
 
 
 Our ISO 9001:2015 and ISO 45001:2018 certifications demonstrate our dedication to world-class quality and a safe, supportive workplace, reinforcing our promise to deliver exceptional service while prioritizing the wellbeing of our people.
 
 
 
 Beyond the Code: Giving Back Matters
 
 
 
 We don&rsquo;t just build apps. We&rsquo;re committed to doing business sustainably and giving back to the community that fuels us. From eco-conscious practices to CSR projects, we&rsquo;re always finding ways to do better&mdash;and we invite you to be a part of that mission.
 
 
 
 Diversity Isn&rsquo;t Just a Buzzword
 
 
 
 At Snoonu, fairness and inclusion are the foundation of everything we do. We&rsquo;re proud to be an equal opportunity workplace that welcomes people from every walk of life. Be bold. Be you. Thrive here.
 
 
 
 Let&rsquo;s Build the Future Together
 
 
 
 Apply now to join a team where your contributions spark a change and your voice is heard. Let&rsquo;s make some magic together.
 
 
 Stay in the loop&mdash;connect with us on LinkedIn!
</div>

Security Compliance Officer

MEDIFLOWS BILLING SOLUTIONS Company

NICON Group of Colleges is seeking a knowledgeable and proactive Cybersecurity Specialist to protect our digital infrastructure and ensure data security. The ideal candidate will have hands-on experience in identifying vulnerabilities, implementing security measures, and responding to cyber threats.Key Responsibilities<ul><li>Monitor systems and networks for security breaches and threats</li><li>Conduct vulnerability assessments and penetration testing</li><li>Implement and maintain security controls, policies, and procedures</li><li>Respond to incidents and perform root cause analysis</li><li>Ensure data protection, backup, and disaster recovery processes</li><li>Manage firewalls, IDS/IPS, and endpoint security solutions</li><li>Perform regular security audits and compliance checks</li><li>Train staff on cybersecurity awareness and best practices</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, IT, Cybersecurity, or related field</li><li>1&ndash;3 years of experience in cybersecurity or network security</li><li>Relevant certifications such as:</li><li>CEH (Certified Ethical Hacker)</li><li>CompTIA Security+</li><li>Strong understanding of:</li><li>Network security (TCP/IP, firewalls, VPNs)</li><li>Security frameworks and best practices</li><li>Threat detection and risk management</li><li>Experience with security tools (Wireshark, Metasploit, Nessus, etc.)</li><li>Knowledge of Linux and Windows security environments</li></ul>Preferred Qualifications<ul><li>Experience with SIEM tools (Splunk, IBM QRadar)</li><li>Familiarity with cloud security (AWS/Azure)</li><li>Knowledge of compliance standards (ISO 27001, GDPR)</li><li>Scripting knowledge (Python, Bash)</li></ul>Job Type: Part-timePay: Rs50,000.00 - Rs60,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>related feild: 1 year (Preferred)</li></ul>Location:<ul><li>Rawalpindi (Preferred)</li></ul>Work Location: In person

Cybersecurity Specialist (CEH / Security+)

STC Bahrain

stc Bahrain provides telecommunications and digital services across Bahrain.At stc Bahrain, cybersecurity roles usually sit within Business Products &amp; Solutions / ICT / SOC (Security Operations / Enterprise Security) teams.Core Responsibilities:Depending on level (SOC Analyst, Engineer, or Specialist), typical duties include:1. Threat Monitoring &amp; DetectionMonitor security alerts from SIEM tools and SOC systemsDetect suspicious network activity and cyber threatsAnalyze logs from servers, endpoints, and cloud systems2. Incident ResponseInvestigate cyber incidents (malware, phishing, breaches)Contain and escalate security threatsSupport recovery and forensic analysis3. Security OperationsMaintain firewalls, IDS/IPS, endpoint protection toolsApply security patches and updatesEnsure network and cloud security compliance4. Risk &amp; ComplianceSupport cybersecurity audits and risk assessmentsEnsure alignment with ISO 27001 and telecom security standardsDocument vulnerabilities and mitigation plans5. Enterprise &amp; Cloud Security (advanced roles)Secure cloud platforms and applicationsManage identity/access control systemsSupport Zero Trust security frameworksstc also operates a large SOC and AI-driven cybersecurity ecosystem protecting networks, cloud, and enterprise systemsSkills &amp; Requirements:Bachelor&rsquo;s in IT / Computer Science / CybersecurityCertifications (preferred):Security+ / CEH / CISSP / CCNA SecurityKnowledge of:SIEM tools (Splunk, QRadar)Firewalls, endpoint security, IDS/IPSStrong analytical and incident handling skillsUnderstanding of telecom or enterprise networks is a plusPay: From RO1,000.000 per monthWork Location: In person

Cybersecurity (stc Bahrain)

Technology Plus - Your Geek Alternative

<div>
 
 
 About Technology Plus:
 
 
 
 Since 1995, Technology Plus has been a trusted technology partner for businesses, offering expertise in IT, Telecom, Cabling, Security, and Audio/Visual services. We pride ourselves on delivering personalized service that empowers our clients to focus on what they do best. As we continue to evolve, we're looking for a Cybersecurity Specialist to join our dynamic team!
 
 
 &nbsp;
 
 
 
 Why You'll Love Working Here:
 
 
 
 
 Family-Oriented Culture:
 
 &nbsp;We believe in work-life balance and foster a supportive, collaborative environment.
 
 
 
 Comprehensive Benefits:
 
 &nbsp;Enjoy health benefits, paid time off, retirement plans, and other perks.
 
 
 
 Growth Opportunities:
 
 &nbsp;With nearly three decades of growth, we offer opportunities for professional development.
 
 
 
 Team Support:
 
 &nbsp;We celebrate wins together and promote a culture of recognition and teamwork.
 
 
 &nbsp;
 
 
 
 Position Overview:
 
 
 
 We are seeking a Cybersecurity Specialist who thrives in a collaborative environment and values meaningful interactions with both clients and internal teams.
 
 
 &nbsp;
 
 
 As a Cybersecurity Specialist, you will act as a frontline defense across multiple diverse client environments, protecting systems, data, and operations from evolving threats. You'll work alongside cross-functional teams to monitor, respond to, and proactively prevent security risks while serving as a trusted security resource for businesses across the region.
 
 
 &nbsp;
 
 
 This role goes beyond technical execution-you will also serve as a security lead for clients, helping them understand risks, navigate security challenges, and implement practical, effective solutions. This is an ideal opportunity for someone who enjoys variety, solving complex security puzzles, and taking ownership of outcomes.
 
 
 &nbsp;
 
 
 This is a full-time position (Monday to Friday, 8 AM - 5 PM) based at our office in Louisville, KY. The physical environment requires frequent indoor work, but the work location may vary between office, warehouse, and other locations. Occasional outdoor work may also be required.
 
 
 &nbsp;
 
 
 
 Key Responsibilities:
 
 
 
 &nbsp;
 
 
 
 Security Monitoring &amp; Response:
 
 &nbsp;Act as a frontline defense by monitoring alerts from our Operations Center, investigating suspicious activity, and performing real-time remediation across multiple environments.
 
 
 &nbsp;
 
 
 
 Environment Hardening:
 
 &nbsp;Implement and manage next-generation firewalls, MDR/EDR solutions, MFA, and other security controls across various client infrastructures.
 
 
 &nbsp;
 
 
 
 Vulnerability Management:&nbsp;
 
 Conduct regular scans to identify vulnerabilities, misconfigurations, and security gaps, and take action to remediate risks.
 
 
 
 Access &amp; Identity Security:&nbsp;
 
 Manage user access, permissions, and authentication practices to ensure secure system usage.
 
 
 &nbsp;
 
 
 
 Compliance Support:
 
 &nbsp;Guide clients through security and compliance requirements by implementing and maintaining best practices.
 
 
 &nbsp;
 
 
 
 Security Risk Assessments:
 
 &nbsp;Oversee and review risk assessments with clients, leading conversations and developing actionable plans to close identified gaps.
 
 
 &nbsp;
 
 
 
 Security Awareness:&nbsp;
 
 Lead security awareness efforts to help client employees recognize and prevent threats such as phishing and social engineering.
 
 
 &nbsp;
 
 
 
 Documentation &amp; Reporting:
 
 &nbsp;Maintain accurate records of security configurations, incidents, and remediation efforts.
 
 
 &nbsp;
 
 
 
 Project Support:&nbsp;
 
 Collaborate on security-related projects, including system upgrades, migrations, and security enhancements.
 
 
 &nbsp;
 
 
 
 What We're Looking For:
 
 
 
 Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (preferred).
 
 
 Relevant certifications (CompTIA Security+, Network+, Cisco CCNA, or similar).
 
 
 Experience with security tools and platforms (such as firewalls, endpoint protection, MDR/EDR, or monitoring tools) is preferred.
 
 
 Experience working with RMM/PSA tools (such as ConnectWise) and security platforms (such as Guardz, Meraki, or SentinelOne) is a plus.
 
 
 Strong problem-solving skills and the ability to work both independently and as part of a team.
 
 
 Excellent communication and interpersonal skills, with the ability to translate technical concepts into clear, actionable guidance for clients.
 
 
 A proactive, "threat-hunter" mindset-you don't wait for problems; you look for weaknesses before they become risks.
 
 
 A passion for staying up to date with the latest cybersecurity trends and technologies.
 
 
 &nbsp;
 
 
 
 Why Join Technology Plus?
 
 
 
 At Technology Plus, we foster a welcoming and collaborative team environment. You'll be part of a company that values innovation and creativity, offering opportunities for growth and development. Join us in making a real impact on our clients and the community!
 
 
 &nbsp;
 
 
 
 Ready to Apply?
 
 
 
 If you're organized, detail-oriented, and excited about the opportunity to engage with clients, we want to hear from you! Apply today and become part of the Technology Plus family.
 
</div>

Cybersecurity Specialist

The Holding Group of Companies

We are seeking a skilled and proactive Cyber Security Specialist to join our team in Doha, Qatar. The ideal candidate will be responsible for protecting our organization&rsquo;s systems, networks, and data from cyber threats. You will play a key role in identifying vulnerabilities, implementing security measures, and ensuring compliance with security standards.Key Responsibilities:<ul><li>Monitor network traffic and systems for security breaches or suspicious activity</li><li>Identify vulnerabilities and implement appropriate countermeasures</li><li>Conduct regular security assessments, audits, and penetration testing</li><li>Develop and enforce security policies, procedures, and best practices</li><li>Respond to incidents and provide timely resolution and reporting</li><li>Manage firewalls, intrusion detection/prevention systems, and antivirus solutions</li><li>Ensure compliance with local and international cybersecurity standards</li><li>Provide security awareness training to staff</li><li>Stay up to date with the latest cybersecurity trends, threats, and technologies</li></ul>Requirements:<ul><li>Bachelor&rsquo;s degree in Cyber Security, Information Technology, Computer Science, or a related field</li><li>Minimum 2&ndash;3 years of experience in cybersecurity or information security roles</li><li>Strong knowledge of network security, firewalls, VPNs, and IDS/IPS systems</li><li>Familiarity with security frameworks and standards (ISO 27001, NIST, etc.)</li><li>Experience with vulnerability assessment tools and SIEM solutions</li><li>Understanding of operating systems (Windows, Linux) and cloud security is a plus</li><li>Relevant certifications such as CEH, CISSP, CompTIA Security+ are preferred</li><li>Strong analytical and problem-solving skills</li><li>Excellent communication and documentation skills</li></ul>Preferred Skills:<ul><li>Experience in incident response and digital forensics</li><li>Knowledge of scripting or programming (Python, PowerShell, etc.)</li><li>Familiarity with cloud platforms (AWS, Azure, Google Cloud)</li></ul>Benefits:<ul><li>Competitive salary package</li><li>Health insurance</li><li>Professional development and certification support</li><li>Dynamic and collaborative work environment</li></ul>Job Type: PermanentPay: From QAR3,500.00 per monthWork Location: In person

Cyber Security Specialist

Spell Engineering

Location: Murree Road, RawalpindiShift: Night ShiftEmployment Type: Full-TimeJob Overview:We are seeking a highly experienced and disciplined retired FIA or Cybercrime professional to oversee internal compliance, legal documentation, and operational security. The ideal candidate will bring strong knowledge of regulatory frameworks, investigative procedures, and enforcement protocols to ensure the company operates within legal boundaries and maintains a secure working environment.Key Responsibilities:<ul><li>Oversee and manage all legal documentation, compliance records, and regulatory requirements.</li><li>Ensure company operations align with local laws, cybercrime regulations, and compliance standards.</li><li>Monitor internal activities and implement security protocols to safeguard company assets and data.</li><li>Handle sensitive matters, investigations, and internal disputes with professionalism and confidentiality.</li><li>Coordinate with relevant authorities when required and manage legal communications.</li><li>Supervise staff conduct and ensure adherence to company policies and legal guidelines.</li><li>Maintain proper documentation, record-keeping, and reporting systems.</li><li>Provide guidance on risk management and preventive legal actions.</li><li>Take necessary actions in case of violations or irregularities.</li></ul>Requirements:<ul><li>Retired professional from FIA, Cybercrime Wing, or Law Enforcement Agency.</li><li>Strong understanding of Pakistan cyber laws, compliance procedures, and legal frameworks.</li><li>Proven experience in handling investigations, documentation, and enforcement.</li><li>High level of integrity, discipline, and confidentiality.</li><li>Ability to manage teams and enforce policies effectively.</li><li>Good communication and reporting skills.</li></ul>Preferred Skills:<ul><li>Experience in corporate compliance or private security management.</li><li>Familiarity with digital security, cyber investigations, and fraud prevention.</li><li>Strong decision-making and problem-solving abilities.</li></ul>Working Conditions:<ul><li>Night shift role based on-site at Murree Road, Rawalpindi.</li><li>Requires strong presence, authority, and accountability.</li></ul>Salary:Competitive, based on experience and background.Job Type: Full-timeWork Location: In person

Compliance & Security Officer (Ex-FIA / Cybercrime Professional)

Search 10000+ Cybersecurity compliance specialist jobs near you this May. New roles added regularly across leading industries. Apply today.