cybersecurity consultant

Guernsey

<div>
 Job Details
 
 
 
 Description
 
 
 
 
 Why You&rsquo;ll Love Working Here:
 
 
 
 <ul>
 <li>
 A culture that values integrity, teamwork, and professional growth
 </li>
 <li>
 Opportunities to lead and contribute to game-changing projects
 </li>
 <li>
 An ownership mindset&mdash;our ESOP structure means your success is our success
 </li>
 <li>
 Competitive compensation &amp; benefits
 </li>
 <li>
 Emphasis on work-life balance and flexibility
 </li>
 <li>
 A leadership team that listens and supports your ambitions
 
 
 </li>
 </ul>
 At Guernsey, we&rsquo;re a collaborative team of consulting, engineering, and architectural professionals committed to delivering exceptional, client-focused solutions. United by our mission to improve lives, we build trusted, long-lasting relationships with our clients, our communities, and each other.
 
 
 Our nationally accredited cybersecurity experts help organizations meet their risk management and compliance goals through services such as CMMC C3PAO assessments, NERC CIP, PCI-DSS, HIPAA, vulnerability reviews, security monitoring, training, audits, and incident response planning. We succeed through strong client partnerships, high-quality project delivery, and a family-oriented, community-driven culture.
 
 
 In this role, you&rsquo;ll serve as a trusted advisor&mdash;planning, leading, and conducting cybersecurity audits and risk assessments, while helping clients navigate ever-evolving security frameworks. You&rsquo;ll also play a key role in advancing Guernsey&rsquo;s cybersecurity practice through business development, thought leadership, public speaking, and building strong, lasting client relationships.
 
 
 If you thrive in a consulting environment, enjoy variety in your work, and want to be part of a high-performing team committed to excellence, you&rsquo;ll fit right in.
 
 
 
 What You&rsquo;ll Be Doing
 
 
 
 <ul>
 <li>
 Lead and support cybersecurity audits and risk assessments, including C3PAO Level 2 CMMC assessments.
 </li>
 <li>
 Evaluate internal controls across IT and security environments.
 </li>
 <li>
 Provide clear, actionable recommendations to strengthen cybersecurity controls.
 </li>
 <li>
 Oversee and guide client compliance initiatives with confidence and clarity.
 </li>
 <li>
 Serve as a subject-matter expert on cybersecurity, internal controls, and industry best practices.
 </li>
 <li>
 Cultivate and foster strong client relationships built on trust, communication, and exceptional service.
 </li>
 <li>
 Play a key role in business development&mdash;participate in public speaking engagements, represent Guernsey at industry events, and help identify new opportunities.
 </li>
 <li>
 Collaborate with teammates to ensure consistent delivery excellence across projects.
 
 
 </li>
 </ul>
 
 What You Bring To The Team
 
 
 
 
 
 Education &amp; Certifications
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Management Information Systems, IT Security, Computer Science, or a related field.
 </li>
 <li>
 Current certification as CISA, CRISC, CISSP, or equivalent (required).
 </li>
 <li>
 Active CMMC CCA certification with all prerequisites completed (required).
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 Minimum 5 years of cybersecurity experience.
 </li>
 <li>
 Experience conducting PCI assessments.
 </li>
 <li>
 Experience with CMMC assessments (assessor experience preferred; implementation experience also valued).
 </li>
 <li>
 Strong understanding of cybersecurity frameworks such as CIS, NIST 800-53/171, and PCI-DSS.
 </li>
 <li>
 Prior consulting or client-service experience is strongly preferred.
 </li>
 <li>
 Demonstrated public speaking and business development experience.
 </li>
 <li>
 Excellent written and verbal communication skills.
 </li>
 <li>
 Strong analytical, organizational, and project management abilities.
 </li>
 <li>
 Ability to manage multiple priorities, meet tight deadlines, and work independently with high attention to detail.
 
 
 </li>
 </ul>
 
 
 Travel
 
 
 
 
 <ul>
 <li>
 Travel up to 30% should be expected, including client site visits and occasional trips to Oklahoma City for corporate events, team meetings, and business unit visibility.
 
 
 </li>
 </ul>
 
 Essential Physical Functions
 
 
 
 Sit/stand at a desk or computer
 
 
 Walk, stoop, stand and move around job sites
 
 
 Travel and occasional site visits requiring stooping, standing, and lifting up to 30 lbs.
 
 
 Frequent communication via phone, video, or in-person meetings
 
 
 Ability to focus on digital and paper-based information for extended periods
 
 
 Some project-based travel may be required
 
 
 
 Let&rsquo;s Build the Future Together!
 
 
 
 If you&rsquo;re excited about advancing your cybersecurity career while partnering with clients to solve complex security challenges, we want to hear from you.
 
 
 
 We Are an Equal Opportunity Employer
 
 
 
 
 Guernsey is an Equal Employment Opportunity/Affirmative Action employer. In accordance with Executive Order 11246, employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
 
</div>

Cybersecurity Consultant

Tap Payments

<div>About Tap
Tap Payments is revolutionizing online payments across the MENA region by connecting businesses with simple, unified payment experiences. We need exceptional talent to help us on this journey. 
The Cybersecurity Team 
Do you get all excited when you hear terms like vulnerability assessment, penetration tests, security verification processes, or intrusion detection? If so, you are in the right place. Our Cybersecurity Team spends every waking (and sleeping) minute detecting security threats before they happen. Join the band and help us build ultra-secure payments technology for our customers. 
As a Tapster you will:<ul>
<li>
 Ensure full alignment with SAMA Cybersecurity Framework and Tap&rsquo;s group standards.</li>
<li>Maintain and update cybersecurity documentation including policies, procedures, standards, and control registers.</li>
<li>Support internal and external cybersecurity audits and regulatory reviews.</li>
<li>Prepare reports and responses to regulatory inquiries, inspections, and follow-ups.</li>
<li>Coordinate remediation activities and track progress of corrective action plans.</li>
<li>Conduct risk assessments and control testing across systems and environments.</li>
<li>Identify, evaluate, and document cybersecurity risks, recommending mitigation actions.</li>
<li>Support threat intelligence analysis and vulnerability management.</li>
<li>Facilitate penetration tests and follow-up on findings closure.</li>
<li>Participate in risk review committees and ensure cyber risk reporting accuracy.</li>
<li>Support daily monitoring of security alerts, logs, and anomalies through the SOC.</li>
<li>Coordinate incident response and forensic investigations when required.</li>
<li>Ensure timely containment, eradication, and recovery for security events.</li>
<li>Maintain incident registers and lessons-learned reports.</li>
<li>Validate that monitoring tools and SIEM configurations align with group baselines.</li>
<li>Support implementation of endpoint protection, access control, and encryption mechanisms.</li>
<li>Verify compliance with system hardening, patching, and network segmentation policies.</li>
</ul><ul><li>Oversee secure integration of new applications, APIs, and third-party services.</li>
<li>Participate in architecture reviews to validate security-by-design principles.</li>
</ul><ul><li>Review change management and deployment activities for cybersecurity impact.</li>
</ul><ul><li>Deliver cybersecurity awareness and phishing simulation campaigns for KSA staff.</li>
<li>Promote a culture of security and compliance within the organization.</li>
<li>Contribute to the development of new security initiatives and group Projects.</li>
<li>Monitor emerging threats, tools, and best practices to enhance Tap&rsquo;s defense posture.</li>
<li>Support periodic business continuity and disaster recovery testing.</li></ul> 
 
What you will bring to the party:<ul>
<li>
 Proficient with SIEM, IDS/IPS, endpoint protection, and vulnerability management tools.</li>
<li>Strong understanding of SAMA Cybersecurity Framework, ISO 27001, NSIT and PCI DSS.</li>
<li>Knowledge of AWS cloud security and identity management (IAM, MFA, encryption).</li>
<li>Experience in implementing and auditing cybersecurity controls in regulated financial or fintech environments.</li>
<li>Familiarity with KSA laws, including the Personal Data Protection Law (PDPL).</li>
<li>Minimum 3&ndash;5 years of experience in cybersecurity, IT risk, or information security roles.</li>
<li>Certifications preferred: CISSP, CISM, CEH, ISO 27001 LA/LI, CompTIA Security+.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>High attention to detail and integrity.</li>
<li>Excellent written and verbal communication skills in English and Arabic.</li>
<li>Collaborative mindset with the ability to work cross-functionally.</li></ul> 
 
Are you ready to shape the future of payments in MENA?</div>

help AG

<div>Help AG is looking for a talented and experienced Senior Offensive Cybersecurity Consultant who will be responsible to deliver vulnerability assessment and penetration testing services for internal/external assets, web applications, mobile platforms and network/infrastructure. The role will also include conducting source code review and audit. In addition to red teaming and purple teaming exercises. 
Responsibilities:<ul><li> 
Perform the vulnerability assessment and penetration testing as per Help AG&rsquo;s methodology and scope of the assigned project.</li><li>
Populate the VA and PT knowledge base with new learned techniques, attacks or other zero day findings.</li><li>
Update the Help AG penetration testing guideline by documenting the newly added attacks and procedures to the methodology.</li><li>
Attend technical customer meetings and present Help AG portfolio and services.</li><li>
Provide appropriate effort sizing during presales phase.</li><li>
Research new threats.</li><li>
Perform security assessments independently</li><li>
Perform software development code review.</li><li>
Perform web-based penetration testing.</li><li>
Perform static/dynamic code audit with manual verification.
</li><li>Perform network and server-based security audit and penetration testing.
</li><li>Perform red/purple teaming exercises</li></ul> 
Qualifications &amp; Skills:<ul><li> 
This role is only for Saudi National.
</li><li>Bachelor or MSc in Computer Science or relevant degree.
</li><li>3 - 5 years of experience as a penetration tester.</li><li>
Knowledge in programming technologies and web-based programming.</li><li>
Quick learner, self-motivated and eager to learn.</li><li>
Good understanding of software development lifecycle.
</li><li>Technical writing (including articles, demonstrations, reports and technical blogs).</li><li>
Good presentation skills.
</li><li>OSCP or OSCE certified.
</li><li>SANS certifications are preferred.</li></ul> 
Benefits:<ul><li> 
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Tailored training &amp; development program.</li></ul> 
About Us:
Help AG is the cybersecurity arm of e&amp; enterprise and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge. 
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; in2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business</div>

Senior Offensive Cybersecurity Consultant

Help AG, an e& enterprise company

<div>
 Help AG is looking for a talented and experienced Senior Offensive Cybersecurity Consultant who will be responsible to deliver vulnerability assessment and penetration testing services for internal/external assets, web applications, mobile platforms and network/infrastructure. The role will also include conducting source code review and audit. In addition to red teaming and purple teaming exercises.
 
 
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Perform the vulnerability assessment and penetration testing as per Help AG&rsquo;s methodology and scope of the assigned project.
 </li>
 <li>
 Populate the VA and PT knowledge base with new learned techniques, attacks or other zero day findings.
 </li>
 <li>
 Update the Help AG penetration testing guideline by documenting the newly added attacks and procedures to the methodology.
 </li>
 <li>
 Attend technical customer meetings and present Help AG portfolio and services.
 </li>
 <li>
 Provide appropriate effort sizing during presales phase.
 </li>
 <li>
 Research new threats.
 </li>
 <li>
 Perform security assessments independently
 </li>
 <li>
 Perform software development code review.
 </li>
 <li>
 Perform web-based penetration testing.
 </li>
 <li>
 Perform static/dynamic code audit with manual verification.
 </li>
 <li>
 Perform network and server-based security audit and penetration testing.
 </li>
 <li>
 Perform red/purple teaming exercises
 
 
 
 </li>
 </ul>
 
 Qualifications &amp; Skills:
 
 
 
 <ul>
 <li>
 This role is only for Saudi National.
 </li>
 <li>
 Bachelor or MSc in Computer Science or relevant degree.
 </li>
 <li>
 3 - 5 years of experience as a penetration tester.
 </li>
 <li>
 Knowledge in programming technologies and web-based programming.
 </li>
 <li>
 Quick learner, self-motivated and eager to learn.
 </li>
 <li>
 Good understanding of software development lifecycle.
 </li>
 <li>
 Technical writing (including articles, demonstrations, reports and technical blogs).
 </li>
 <li>
 Good presentation skills.
 </li>
 <li>
 OSCP or OSCE certified.
 </li>
 <li>
 SANS certifications are preferred.
 
 
 
 </li>
 </ul>
 
 Benefits:
 
 
 
 <ul>
 <li>
 Health insurance with one of the leading global providers for medical insurance.
 </li>
 <li>
 Career progression and growth through challenging projects and work.
 </li>
 <li>
 Employee engagement and wellness campaigns activities throughout the year.
 </li>
 <li>
 Tailored training &amp; development program.
 
 
 
 </li>
 </ul>
 
 About Us:
 
 
 
 Help AG is the cybersecurity arm of e&amp; enterprise and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.
 
 
 Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; in2020, hence creating a cybersecurity and digital transformation powerhouse in the region.
 
 
 Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.
 
 
 With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business
</div>

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
Identifies and assesses Truist&rsquo;s Corporate cybersecurity legal, regulatory and industry compliance. Executes strategies for closing cybersecurity management compliance gaps, partners in the analysis of legal, regulatory and compliance initiatives. Assists in managing cybersecurity risk and compliance functions which include: establishing cyber polices and standards designed to safeguard the firm&rsquo;s systems and data, performing assessments to identify, manage and mitigate cyber risks, assess and guide remediation of compliance gaps, maintain library of cyber risks and controls, and evaluate and track the cyber program maturity, security advisor to business segments and functions. 
 
***Office-centric in Charlotte, North Carolina***
ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.<ul><li>
Establishes a strategic approach to information/cyber security compliance according to laws and regulations.</li><li>
Analyzes requirements (i.e. data lineage, data mapping/tracing control, reporting requirement, threats, assess management, PCI, etc.) to support the creation of enterprise-wide policies and standards, by effectively translating laws and regulations into operational functions and action steps for execution and compliance adherence.</li><li>
Monitors reporting on information/cyber security compliance and related risk &amp; controls programs to a variety of audiences, including the regulators/examiners.</li><li>
Identifies solutions for potential regulatory risks and maintains an internal inventory of applicable U.S. laws and regulations, pertaining to Information and cybersecurity.</li><li>
Ensures regulatory rules are incorporated into appropriate compliance policies, standards, processes, training, and monitoring/testing activities at an enterprise level.</li><li>
Works with different stakeholders to perform cyber governance routines, conduct cyber risk and compliance assessments.</li><li>
Performs data analysis and interpretation for risk factors and presents KRI metrics and analysis and makes recommendations concerning risk factors, mitigation controls and remediation plans.</li></ul> 
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.<ul><li>
 Bachelor&rsquo;s degree preferably in information security, business, organizational or compliance law, or finance</li><li>
Five years related experience performing risk management, compliance and project management</li><li>
Strong knowledge of cybersecurity and governance terms, disciplines and frameworks</li></ul> 
Preferred Qualifications:<ul><li>
Experience interacting with financial services regulatory bodies; preferably Office of the Comptroller of the Currency (OCC), Federal Reserve Board (FRB), FDIC, etc. (laws, rules, regulations and guidance)</li><li>
Cybersecurity certifications such as CISA, CISSP</li><li>
Banking or financial services experience</li><li>
Regulatory Change Management experience</li></ul>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Cybersecurity Compliance Consultant

VaporVM

<div><div><div>Date Posted:</div>
14 November, 2025</div>
<div><div>Industry:</div>
IT Services and IT Consulting</div>
<div><div>Location:</div>
VAPORVM IT SERVICES DMCC</div></div>
 <div><h2 class="jobSectionHeader">Job Description:</h2>
<div><h1 class="jobSectionHeader">Job Description &ndash; GRC Consultant (Saudi National)</h1>
<ul><li></li></ul>
<h2 class="jobSectionHeader">
Overview</h2>

We are seeking a highly qualified GRC Consultant under our staff augmentation model to support the Governance, Risk &amp; Compliance (GRC) scope for one of EY&rsquo;s clients in Riyadh. The resource will play a key role in strengthening the client&rsquo;s ISO 27001 Information Security Management System (ISMS), ensuring compliance, and preparing for audits.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<h3 class="jobSectionHeader">ISO 27001 Governance &amp; Compliance</h3>
<ul><li>Develop, review, and update ISO 27001&ndash;related policies, procedures, and standards covering governance, risk management, and cybersecurity compliance.
</li><li>Ensure alignment of documentation with ISO 27001:2022 requirements and best practices.
</li></ul><h3 class="jobSectionHeader">Risk Management &amp; Documentation</h3>
<ul><li>Conduct and support risk assessments, maintain risk registers, and prepare documentation in accordance with ISO 27001 controls.
</li><li>Maintain and update ISMS-related records, logs, reports, and evidence repositories.
</li></ul><h3 class="jobSectionHeader">Audit Support &amp; Readiness</h3>
<ul><li>Prepare the organization for internal and external audits, ensuring full compliance with ISO 27001 requirements.
</li><li>Coordinate with internal stakeholders and audit teams to provide required documentation and responses.
</li></ul><h3 class="jobSectionHeader">Reporting &amp; Governance Material</h3>
<ul><li>Develop reports, dashboards, presentations, and board-level materials to support cybersecurity governance and ongoing ISO-related initiatives.
</li></ul><h3 class="jobSectionHeader">Technical Advisory</h3>
<ul><li>Provide technical input relating to:
<ul>
<li>Firewall and Network Security
</li><li>WAF, Load Balancers, SIEM solutions
</li><li>Windows Server &amp; Linux environments
</li><li>Cloud environments (Azure/AWS/GCP), scripting (Python, PHP, JavaScript)
</li></ul></li><li>Work closely with technical teams to validate controls, security configurations, and compliance readiness.
</li></ul><h2 class="jobSectionHeader">Candidate Requirements</h2>
<h3 class="jobSectionHeader">Experience</h3>
<ul><li>8+ years of hands-on experience in cybersecurity and GRC projects.
</li><li>Proven experience in implementing, managing, or maintaining ISO 27001 ISMS, including documentation and audit support.
</li></ul><h3 class="jobSectionHeader">Technical Skills</h3>
<ul><li>Strong technical understanding of:
<ul>
<li>Firewalls, WAF, SIEM tools
</li><li>Load balancing technologies
</li><li>Windows &amp; Linux server environments
</li><li>Cloud infrastructure security
</li><li>Basic scripting/programming knowledge (Python, PHP, JavaScript)</li></ul></li></ul></div></div>

GRC Specialist

Edison Smart®

<div>
 
 
 Presales Consultant - Cyber - Arabic Speaker
 
 
 
 
 
 
 We&rsquo;re seeking a proactive professional who thrives at the intersection of technology and business to help organizations strengthen their cybersecurity posture. In this role, you&rsquo;ll work closely with clients and internal teams to design, demonstrate, and implement tailored security solutions.
 
 
 
 
 
 
 Your Responsibilities:
 
 
 <ul>
 <li>
 Understand client needs and translate them into robust cybersecurity architectures for both IT and OT environments.
 </li>
 <li>
 Lead technical presentations, product demonstrations, and proof-of-concept initiatives.
 </li>
 <li>
 Provide strategic guidance on risk management, regulatory compliance, and best-in-class security practices.
 </li>
 <li>
 Evaluate, recommend, and integrate security solutions across areas such as network protection, identity management, cloud security, and endpoint defense. (SIEM, SOAR, PAM, IAM, DAM, EDR)
 </li>
 <li>
 Assist in proposal creation, commercial planning, and cost-benefit analyses to support investment decisions.
 </li>
 <li>
 Conduct workshops and knowledge-sharing sessions for clients and colleagues.
 </li>
 <li>
 Act as a trusted advisor during the sales process and help ensure smooth handover to delivery teams.
 </li>
 </ul>
 
 
 
 
 
 What You Bring:
 
 
 <ul>
 <li>
 2&ndash;8 years&rsquo; experience in cybersecurity consulting, presales, or solution design.
 </li>
 <li>
 Solid knowledge of modern security technologies and frameworks.
 </li>
 <li>
 Strong analytical, presentation, and communication skills.
 </li>
 <li>
 Ability to juggle multiple projects and prioritize effectively.
 </li>
 <li>
 Relevant industry certifications (e.g., CISSP, CISM, CEH) or vendor-specific qualifications are advantageous.
 </li>
 </ul>
</div>

Presales Consultant - Cyber (Arabic Speaker)

Search 3434+ Cybersecurity consultant jobs near you this November. New roles added regularly across leading industries. Apply today.

3434 cybersecurity consultant jobs NEAR_ME

Cybersecurity Consultant

Cybersecurity Consultant

Senior Offensive Cybersecurity Consultant

Senior Offensive Cybersecurity Consultant

Cybersecurity Compliance Consultant

GRC Specialist

Presales Consultant - Cyber (Arabic Speaker)