cybersecurity consultant

DICETEK LLC

<div>We are looking for highly skilled cybersecurity consultants with extensive hands-on experience in SOC design, SIEM engineering, Incident Response, Threat Detection, and building cybersecurity maturity. Consultants should be proficient in building SOCs from scratch, developing SIEM use-cases, MITRE mapping, IR playbooks, and defining cybersecurity strategy.
Key Responsibilities:
Lead technical cybersecurity discussions with IT, vendors, and stakeholders.
Ensure alignment with regulatory requirements and security best practices.
Enhance and maintain SIEM/SOC operations, including rule tuning, process development, and SOC setup (if needed).
Required Expertise:
Strong hands-on experience in SIEM/SOC design and operations
Cybersecurity governance and risk management
Security architecture reviews
Ability to engage effectively with IT/Security teams
Experience in banking, finance, telco, or enterprise environments
15&ndash;20 years of practical cybersecurity experience 
1 Cybersecurity Architecture Assessment &amp; Strategy<ul><li>
Lead a full end-to-end evaluation of the organization&rsquo;s existing SIEM architecture, SOC operations, and IR capabilities.</li><li>
Assess effectiveness across people, processes, and technology, identifying strengths, gaps, and opportunities for enhancement.</li><li>
Benchmark current cybersecurity maturity against industry standards (e.g., NIST CSF, ISO 27001, MITRE ATT&amp;CK).</li><li>
Develop a prioritized roadmap for SIEM/SOC/IR optimization and modernization.</li></ul>
2. SIEM Optimization &amp; Enhancement<ul><li>
Redesign SIEM architecture and data ingestion strategy to improve visibility, performance, and event fidelity.</li><li>
Enhance log parsing, normalization, enrichment, and ingestion from critical sources (cloud, endpoints, identity, OT/ICS, network, and security tools).</li><li>
Refine correlation logic, detection use cases, and alert tuning methodologies to reduce false positives and increase detection accuracy.</li><li>
Implement advanced detection techniques mapped to MITRE ATT&amp;CK, including custom rules, dashboards, and analytics.</li><li>
Establish SIEM governance processes, rule-tuning standards, and performance optimization practices.</li></ul>
3. SOC Maturity Improvement &amp; Operational Excellence<ul><li>
Conduct a deep review of SOC workflows, tiered responsibilities, shift coverage, and tooling integration.</li><li>
Redesign triage and escalation workflows to improve response efficiency and adherence to SLAs.</li><li>
Enhance tool interoperability (SIEM, SOAR, ticketing, TIP, EDR) to streamline end-to-end detection and response.</li><li>
Develop or refine IR playbooks for priority incident types (phishing, malware, insider threat, cloud compromise, etc.).</li><li>
Lead SOC modernization initiatives including automation, orchestration, and analyst enablement.</li></ul>
4. Incident Response Uplift<ul><li>
Evaluate and enhance incident response strategies, containment approaches, escalation paths, and communication flows.</li><li>
Conduct tabletop exercises, technical simulations, and scenario-based training to improve analyst readiness.</li><li>
Improve coordination across IT, security, compliance, and risk teams during incident handling.</li><li>
Advise leadership on best practices, emerging threats, and enterprise IR preparedness.</li></ul>
5. Implementation Leadership &amp; Delivery<ul><li>
Drive the successful implementation of all improvements identified during the assessment phase.</li><li>
Manage cross-functional workstreams, ensuring timely delivery of SIEM/SOC enhancements.</li><li>
Ensure all changes align with cybersecurity best practices, compliance requirements, and business objectives.</li><li>
Track progress using KPIs such as MTTD, MTTR, correlation accuracy, false-positive rates, and detection coverage.</li></ul></div>

Cybersecurity consultant

Technovalley Software India Pvt Ltd

<ul><li>Perform advanced vulnerability assessments, penetration testing, and red-teaming assignments across networks, servers, cloud, and web applications.</li><li>Identify weak security configurations and provide detailed remediation plans and risk mitigation strategies.</li><li>Conduct digital security audits, incident analysis, and forensic investigations.</li><li>Evaluate existing IT infrastructure and develop comprehensive cybersecurity policies, SOPs, and compliance frameworks.</li><li>Present technical risk reports and executive summaries to senior leadership and management.</li><li>Stay updated with global threat intelligence, malware trends, ransomware attacks, zero-day exploits, and security advisories.</li><li>Lead a team of junior analysts, assign security tasks, and oversee implementation of recommended controls.</li><li>Conduct awareness programs and security onboarding for employees to reduce insider threats and human-related risks.</li><li>Deliver high-quality hands-on training for students, corporates, and government stakeholders in cybersecurity tools and techniques.</li></ul>Mandatory Certifications (Minimum 3 required)(Candidates holding multiple global certifications will be given priority)You should have at least THREE of the certifications listed below:<ul><li>CEH / CEH Practical</li><li>CHFI</li><li>ECSA / CPENT</li><li>LPT / LPT Master</li><li>CEI (EC-Council Instructor)</li><li>OSCP / OSCE / OSWE / OSEP</li><li>CompTIA Security+ / CySA+ / PenTest+</li><li>CISSP / CISM / CISA</li><li>CREST CRT / CPSA or equivalent</li></ul>Applicants with 1+ certifications will be considered for senior consultant roles.Technical Expertise (Must Have Hands-On Skills)<ul><li>Network security, packet analysis, and advanced firewall configurations</li><li>Web application security testing (OWASP Top 10 + API security)</li><li>IoT and embedded device security</li><li>Mobile application security (Android &amp; iOS)</li><li>Reverse engineering &amp; malware analysis</li><li>Cryptography, encryption technologies &amp; key management</li><li>Cloud security (AWS / Azure / GCP)</li><li>Cyber forensics, chain of custody, and digital evidence documentation</li><li>SIEM, IDS/IPS, log analysis &amp; threat hunting</li></ul>Preferred Candidate Profile<ul><li>Minimum 2&ndash;8 years of practical cybersecurity experience</li><li>Experience conducting live VAPT projects for corporates / government organisations</li><li>Strong presentation skills and confidence in classroom &amp; corporate training</li><li>Ability to deliver hands-on labs, demos, and real hack simulations</li></ul>CPENTLPTShould have hands on experience on personal security on the internet, web security, loT security, mobile security, cryptography, reverse engineering and cyber forensics.Job Type: Full-timePay: &#8377;20,000.00 - &#8377;40,000.00 per monthWork Location: In person

Certified Cybersecurity Trainer/Consultant

Innovative Solutions SA

<div>
 
 Company Description
 
 
 
 Innovative Solutions (IS) is a leading pure-player Cybersecurity company in the GCC, established in 2003 and headquartered in Riyadh, with a presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompass Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.
 
 
 Innovative Solutions is committed to its Mission to "Bring Trust to Cyberspace" to ensure "
 
 Your Business, Secured!
 
 ."
 
 
 
 Role Description
 
 
 
 The Senior Technical Consultant will lead the Integrated Network Defense Department, overseeing the design, implementation, and continuous improvement of secure network architecture across the organization. This role ensures the seamless integration of cybersecurity controls (WAF, FW, EDR, IPS, PAM) with core network functions (routing, switching, load balancing, SD-WAN). The consultant provides expert guidance on security strategies, drives technology modernization, and ensures the resilience, availability, and integrity of the ministry's network and security infrastructure.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Leadership &amp; Strategy
 </li>
 <li>
 Establish and lead the Integrated Network Defense Department, including vision, roadmap, and operating model
 </li>
 <li>
 Develop and maintain unified network and security architecture aligned with organizational goals and regulatory frameworks
 </li>
 <li>
 Lead modernization initiatives, including Zero Trust, SASE, XDR, and network segmentation
 </li>
 <li>
 Provide advisory to senior management on strategic investments, technology refresh, and managed security services adoption
 </li>
 <li>
 Network &amp; Security Architecture
 </li>
 <li>
 Design and oversee enterprise-level architecture that integrates routing, switching, firewalling, WAF, EDR, IPS, NAC, VPN, IAM, and cloud security
 </li>
 <li>
 Ensure architecture scalability and resilience across HQ, branches, data centers, and cloud environments
 </li>
 <li>
 Define and enforce network security baselines, standards, and hardening guidelines
 </li>
 <li>
 Lead the evaluation and selection of next-generation technologies and vendors
 </li>
 <li>
 Operations &amp; Governance
 </li>
 <li>
 Ensure continuous and secure operation of the network and security stack, including performance optimization and incident response alignment
 </li>
 <li>
 Oversee configuration management, change control, and lifecycle management for network and security assets
 </li>
 <li>
 Collaborate with SOC, NOC, Threat Intelligence, and other cybersecurity teams to create a unified defense approach
 </li>
 <li>
 Establish KPIs, SLAs, dashboards, and reporting mechanisms for operational visibility and decision making
 </li>
 <li>
 Technical Expertise &amp; Support
 </li>
 <li>
 Act as the escalation point for complex networking and security issues
 </li>
 <li>
 Provide architecture reviews, solution designs, PoCs, and troubleshooting leadership
 </li>
 <li>
 Mentor junior engineers and guide knowledge-transfer activities with vendors and managed service providers
 </li>
 <li>
 Compliance &amp; Risk Management
 </li>
 <li>
 Ensure adherence to national cybersecurity frameworks (e.g., NCA, SAMA CSF) and global best practices (ISO 27001, NIST 800-53, CIS)
 </li>
 <li>
 Conduct risk assessments, gap analyses, and compliance audits on network and security controls
 </li>
 <li>
 Define mitigation plans for vulnerabilities, misconfigurations, or architectural risks
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 
 Requirements (Experience &amp; Skills)
 
 
 
 <ul>
 <li>
 10+ years of technical experience in network and cybersecurity domains
 </li>
 <li>
 Proven experience leading teams or departments responsible for routing, switching, firewalls, WAF, EDR, IPS, and related security controls
 </li>
 <li>
 Strong background in designing enterprise architectures across on-prem, hybrid, and cloud environments
 </li>
 <li>
 Hands-on expertise with Cisco, Palo Alto, Fortinet, F5, Splunk, Elastic, and similar platforms
 </li>
 <li>
 Experience with Zero Trust implementation, micro-segmentation, and secure access frameworks
 </li>
 <li>
 Familiarity with government, enterprise, or critical infrastructure environments
 
 
 </li>
 </ul>
 
 Technical Skills
 
 
 
 <ul>
 <li>
 Advanced knowledge of routing protocols (OSPF, BGP), switching, SD-WAN, DNS/DHCP/IPAM
 </li>
 <li>
 Strong skills in firewalling, WAF, EDR/XDR, IPS, proxy, NAC, VPN, IAM/PAM
 </li>
 <li>
 Experience with load balancers, reverse proxies, and traffic engineering
 </li>
 <li>
 Understanding of cloud security (Azure/AWS), microservices architecture, and API security
 </li>
 <li>
 Strong analytical, documentation, and architecture diagramming skills
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong leadership and communication capabilities
 </li>
 <li>
 Ability to influence stakeholders and drive cross-functional collaboration
 </li>
 <li>
 Excellent problem-solving and crisis management abilities
 </li>
 <li>
 Strategic mindset with ability to translate complex technical issues to business terms
 
 
 </li>
 </ul>
 
 Certifications (Preferred)
 
 
 
 
 Network Certifications
 
 
 
 <ul>
 <li>
 CCNP / CCIE (Routing &amp; Switching or Security)
 </li>
 <li>
 JNCIP / JNCIE
 </li>
 <li>
 F5 Certified Technology Specialist (CTS)
 
 
 </li>
 </ul>
 
 Security Certifications
 
 
 
 <ul>
 <li>
 CISSP
 </li>
 <li>
 CISM
 </li>
 <li>
 GIAC (GSEC, GCIA, GCED, GCIH)
 </li>
 <li>
 Palo Alto PCNSE / Fortinet NSE4-NSE7
 </li>
 <li>
 AWS/Azure Security Specialty (for hybrid/cloud environments)
 
 
 </li>
 </ul>
 
 Architecture &amp; Governance Certifications
 
 
 
 <ul>
 <li>
 TOGAF
 </li>
 <li>
 ITIL v4
 </li>
 </ul>
</div>

Sr. Technical Consultant - Integrated Network Defense Division

Guidehouse

<div>Job Family:
Management Consulting 
Travel Required:
None 
Clearance Required:
Active Top Secret (TS)
What You Will Do: 
Guidehouse is seeking a cybersecurity governance consultant to provide governance documentation and implementation support to a client cybersecurity governance, risk management, and compliance (GRC) program. The governance consultant will be responsible for developing cybersecurity policy, plan, and procedure documentation and assisting with implementation. 
Responsibilities include the following:<ul><li>
Developing new cybersecurity governance documentation including policies, plans, procedures, processes, forms, and diagrams</li><li>
Working with client leadership, program managers, and engineering personnel to gather governance requirements</li><li>
Working with internal and external stakeholders to review and revise draft documentation</li><li>
Identifying and recommending policy and process improvements to the GRC manager</li><li>
Updating existing cybersecurity governance documentation to incorporate improvements and maintain currency</li><li>
Translating technical cybersecurity and network operations information into language to be understood by leadership and non-technical audiences</li><li>
Communicating cybersecurity governance updates to stakeholders</li><li>
Assisting with the implementation of new cybersecurity governance processes</li></ul>
What You Will Need:<ul><li>
An ACTIVE and MAINTAINED &quot;TOP SECRET&quot; Federal or DoD security clearance</li><li>
Bachelor&rsquo;s degree</li><li>
THREE (3) or more years of experience working in federal cybersecurity or IT</li></ul>
What Would Be Nice To Have:<ul><li>
Bachelor&rsquo;s degree in cybersecurity, information security, or a related field</li><li>
Strong understanding of federal cybersecurity requirements and frameworks</li><li>
Demonstrated experience developing high-level formal governance documentation such as policies or plans</li><li>
Demonstrated experience developing technical governance documentation such as procedures, workflows, and diagrams</li><li>
Demonstrated experience working with both technical and management audiences to implement new policies and processes</li><li>
Demonstrated experience identifying opportunities for governance improvements and championing implementation of new policies or processes</li><li>
Excellent written and verbal communication skills</li><li>
Excellent attention to detail</li><li>
Excellent organizational and time management skills</li><li>
Relevant cybersecurity certification (CISSP, CISM, CGRC, CISA, or similar)</li><li>
Experience with formal change management processes</li><li>
Experience working in DOD or Intelligence Community cybersecurity programs</li><li>
Understanding of cybersecurity risk and governance considerations associated with emerging technologies</li><li>
Demonstrated ability to quickly grasp new technical concepts and integrate new information into existing plans and frameworks</li></ul>
The annual salary range for this position is $98,000.00-$163,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs. 
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:<ul><li>
Medical, Rx, Dental &amp; Vision Insurance</li><li>
Personal and Family Sick Time &amp; Company Paid Holidays</li><li>
Position may be eligible for a discretionary variable incentive bonus</li><li>
Parental Leave and Adoption Assistance</li><li>
401(k) Retirement Plan</li><li>
Basic Life &amp; Supplemental Life</li><li>
Health Savings Account, Dental/Vision &amp; Dependent Care Flexible Spending Accounts</li><li>
Short-Term &amp; Long-Term Disability</li><li>
Student Loan PayDown</li><li>
Tuition Reimbursement, Personal Development &amp; Learning Opportunities</li><li>
Skills Development &amp; Certifications</li><li>
Employee Referral Program</li><li>
Corporate Sponsored Events &amp; Community Outreach</li><li>
Emergency Back-Up Childcare Program</li><li>
Mobility Stipend</li></ul>
About Guidehouse
Guidehouse is an Equal Opportunity Employer&ndash;Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.
If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.
All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.
If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse&rsquo;s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant&rsquo;s dealings with unauthorized third parties.
Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.</div>

Governance, Risk, and Compliance Analyst

Mastercard

<div>Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we&rsquo;re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Managing Consultant, Cybersecurity Business Development
Overview 
 
Mastercard has evolved into a comprehensive technology and services platform. By expanding into areas such as fraud prevention, loyalty, personalisation, and data analytics, Mastercard now supports banks, merchants, and governments in delivering smarter, more secure, and highly personalised customer experiences. 
 
And as digital commerce has grown, so have the security challenges. Cyber threats now extend beyond individual transactions to entire digital ecosystems, requiring a broader approach to protection. Recognizing this, Mastercard strengthened its cybersecurity capabilities through strategic acquisitions, beginning with RiskRecon in 2019 and more recently Recorded Future, a global leader in threat intelligence. These additions enable Mastercard to offer advanced cyber risk assessment and real-time threat detection, helping clients safeguard their entire digital footprint&mdash;not just the payments themselves. 
 
About the Role: 
The Managing Consultant / Manager - Cybersecurity Business Development Lead- will lead the growth of Mastercard&rsquo;s Cyber business in this key segment. As the P&amp;L owner for Mastercard Cybersecurity within the segment, you will lead the strategic growth and commercial success of the cybersecurity business, driving revenue through both direct sales engagement and liaising across any relevant customer facing teams to maximize sales for Cybersecurity. 
 
Responsibilities will include:
 
 
Coordinate Internal Execution Across Teams 
<ul><li>Facilitate key client introductions across businesses
</li></ul>(cross-sell opportunities between Recorded Future, Risk Recong, Cyber-Consulting) 
<ul><li>Oversee sales enablement, especially for Services Business Leads (SBLs)
</li></ul>(sales collateral, pitch decks, training, pipeline visibility) 
<ul><li>Align product, sales, consulting and marketing teams around launches and revenue goals</li></ul>
Specialist Cyber Sales 
<ul><li>End-to-end ownership of sales, with focus on consulting bundles</li><li>Recorded Future &amp; Risk Recon referrals and lead generation for Mastercard managed Accounts</li></ul>
Identify issues, take improvement actions and communicate progress 
<ul><li>Report clearly on commercial integration progress
</li><li>Track lead funnel health and conversion efficiency: and take improvement actions</li><li>Advise on integration risks</li></ul>
Success will be measured by sales performance, client impact, and contribution to the expansion of Mastercard&rsquo;s cybersecurity solutions footprint. 
 
Required Qualifications 
Cybersecurity experience:
 
<ul><li>5+ years&rsquo; work experience which includes time spent in cybersecurity consulting or technology sales, with team management responsibility.</li><li>Industry savvy, understanding emerging cyber trends and creatively leveraging market opportunities.</li><li>Working experience with sales of security services, consulting and/or technologies such as cyber threat intelligence, security awareness and training, cloud security, crisis and incident response management, third party risk management, threat and vulnerability management, security in disruptive technologies such AI - Artificial Intelligence, CRQ &ndash; Cyber Risk Quantification, web application firewall, and identity theft protection.</li></ul> 
Diverse stakeholder management 
<ul><li>Demonstrated experience managing cross-functional initiatives and aligning diverse stakeholders toward common goals</li><li>Strong analytical and problem-solving skills, with a data-driven approach to decision-making and continuous improvement</li><li>Exceptional communication skills, capable of influencing senior leaders and driving alignment without formal authority</li><li>Track record of delivering results through structured planning, rigorous execution, and attention to detail</li><li>Comfort navigating ambiguity and adapting quickly to evolving business priorities and market dynamics</li><li>Ability to balance strategic thinking with detailed tactical execution skills to drive overall client impact and ability to make quick decisions in challenging, ambiguous situations.
</li><li>Experience working in a fast paced, dynamic environment with a flexibility to multitask and handle multiple requests with varying degrees of priority simultaneously.</li><li>Experience in complex organization structures, managing and building effective relationships with internal and external stakeholders.</li></ul> 
Commercial experience 
<ul><li>Excellent communication and presentation skills, capable of articulate storytelling and translating complex concepts into compelling narratives that resonate with clients.
</li><li>Direct selling or customer facing experience, identifying client needs and building cybersecurity proposals.</li><li>Ability to identify new business development opportunities and experience drafting proposals and scoping new opportunities.</li><li>Demonstrated ability to build trust-based relationships with both mid- and executive-level clients</li><li>NOTE: No non-competes that prevent sales interactions with clients in the financial services sector.</li></ul> 
Preferred Qualifications 
<ul><li>Experience with the application of information security standards and good practices (such as PCI-DSS, HIPAA, ISO27001, NIST, CIS, CSA).</li><li>Experience with payment ecosystem security: understanding of security needs for potential customers within your segment (sales territory)</li><li>Experience in managing P&amp;L responsibility or similar business ownership roles, with a focus on growth and profitability</li></ul>
Corporate Security Responsibility 
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:<ul><li>
Abide by Mastercard&rsquo;s security policies and practices;</li><li>
Ensure the confidentiality and integrity of the information being accessed;</li><li>
Report any suspected information security violation or breach, and</li><li>
Complete all periodic mandatory security trainings in accordance with Mastercard&rsquo;s guidelines.</li></ul></div>

Managing Consultant, Cybersecurity Business Development

PwC Middle East

<div>
 A career in our Cyber technology services will allow you to work under the supervision of cyber cybersecurity leadership within the Cyber business unit consulting practice. Use strategic business consulting skills to work with clients through all stages of strategy-based transformation projects. Provide support on client assignments that help to develop a strategy and then refocus an organization on making that strategy a reality. We are a growing team and looking for dynamic, flexible, proactive and hardworking consultants who have a passion for shaping cybersecurity positively in the GCC over the coming years. We have a strong pipeline of large, transformational opportunities with our clients which will provide great opportunities for all our people to step up and play significant and rewarding roles in an entrepreneurial and innovation driven environment.
 
 
 
 Roles &amp; Responsibilities
 
 
 
 As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:
 
 
 Work under the supervision of cybersecurity leadership within the Cyber &amp; Digital Trust business unit consulting practice.
 
 
 Support in the design and development of cybersecurity programs in different domains including the development of strategy, GRC, architecture, identity and access management and cybersecurity solutions based on leading practices such as NIST, CIS, ISO27001 and others.
 
 
 Support the development and implementation of cybersecurity governance, risk and compliance frameworks aligned with NIST CSF, ISO 27001, CIS Controls, and local GCC regulatory requirements (e.g., NCA, SAMA, NESA, TDRA, NDMO).
 
 
 Conduct cybersecurity risk assessments, maturity assessments, and gap analyses to benchmark client capabilities against industry standards and regulatory expectations.
 
 
 Develop and refine cybersecurity policies, procedures, standards, and guidelines ensuring alignment with business objectives, compliance mandates and leading practices.
 
 
 Support audit readiness and certification efforts for frameworks such as ISO 27001 and other related standards.
 
 
 Design of cybersecurity strategies and roadmaps that balance risk management, business enablement, and digital transformation goals.
 
 
 Work closely with cross-functional teams to define target operating models for cybersecurity functions, including governance structures, roles, and performance indicators.
 
 
 Develop and execute cybersecurity awareness and culture programs. This includes designing tailored awareness campaigns, executive briefings, training programs, and behavior-change initiatives to foster a culture of digital trust and resilience.
 
 
 Assist in the design of target technical security architecture for clients with deep understanding and analysis of emerging cybersecurity solutions including, but not limited to, threat intelligence, anti-advanced persistent threats, DLP, SIEM, next generation firewalls, analytics, enterprise incident response and others.
 
 
 Support in the implementation of cybersecurity solutions at client premises and be able to work closely with security vendors and system integrators.
 
 
 Communicate effectively (both verbal and writing) with executives, IT personnel, executives, and business users communities, translating complex cybersecurity concepts into actionable insights.
 
 
 Support in coordinating, facilitating, and making presentations.
 
 
 Support in business development activities, including preparation of technical and financial proposals and participation in client pursuits.
 
 
 Work with colleagues across PwC Middle East offices on client engagements and internal initiatives as well as with international teams.
 
 
 Conduct research on emerging cybersecurity technologies and disseminate knowledge to Cyber &amp; Digital Trust consultants and clients where required.
 
 
 Assist in developing new service offerings for the Cyber &amp; Digital Trust business unit.
 
 
 Build deep understanding of regional cybersecurity themes and trends, particularly those impacting clients in government, financial services, energy, and critical infrastructure. Work collaboratively with other cybersecurity experts to shape the future of our clients and to bring about positive change.
 
 
 You will have access to all of the latest training and development tools and the support of the wider PwC network.
 
 
 
 Additional Roles &amp; Responsibilities
 
 
 
 Skills and Competencies
 
 
 Strong understanding of emerging cybersecurity technologies and standards.
 
 
 Experience in cybersecurity strategy development, operating model design, culture transformation, as well as cybersecurity governance, risk and compliance management.
 
 
 Experience interpreting and applying GCC regulatory frameworks (NCA, SAMA, NESA, PDPL, etc.) and international leading practices (ISO 27001, NIST CSF, etc.).
 
 
 Special experience in identity and access management, SIEM/SOC, security architecture, cloud and DLP is a plus.
 
 
 Achievement oriented with the ability to be flexible and adaptive on a daily basis.
 
 
 Excellent organisational skills, having the ability to prioritise workload whilst being resilient and able to cope well under pressure and meet tight deadlines.
 
 
 Excellent problem solving skills with a structured thinking process.
 
 
 Strong connections and relationships with clients in Saudi Arabia and the UAE is a plus.
 
 
 Strong time-management and organizational skills.
 
 
 Ability to learn new concepts and carry out technical research.
 
 
 Proven IT skills in Microsoft Office and G-suite applications.
 
 
 Language Skills: Excellent communication skills (verbal and written) in English (Arabic is a plus).
 
 
 The ability and willingness to travel within the Middle East is a MUST.
 
 
 
 Educational Qualifications &amp; Certifications
 
 
 
 Education: B.A/ B.Sc. in Computer Engineering or related field. M.Sc. in Computer Engineering or related field is preferred.
 
 
 Candidates are expected to hold or be actively pursuing one or more of the globally recognized certifications relevant to Cybersecurity, Digital Trust and Project Management.
</div>

GRC & Cloud Security Analyst

ISHRAQAT AL AMAL TECHNICAL SERVICES L.L.C

Information Security ConsultantLocation: Dubai Job Type: Full-Time Experience: 3&ndash;8 years in Information Security, Cybersecurity, or related domainsRole OverviewWe are looking for an Information Security Consultant with strong hands-on experience across security governance, cloud security, SOC operations, and vulnerability management. The ideal candidate should be able to enhance the organization&rsquo;s security posture, support compliance initiatives, and contribute to technical security assessments. A full match to every skill is not required, but candidates must demonstrate strong capability across most of the areas listed below.Key Responsibilities<ul><li>Support and maintain ISO 27001 compliance, documentation, audits, and security controls.</li><li>Implement and manage Data Loss Prevention (DLP) solutions.</li><li>Work with Microsoft Purview and other compliance tools for data governance and risk reduction.</li><li>Enhance and administer Azure security posture, including security configurations, monitoring, and remediation.</li><li>Conduct digital forensics investigations, incident analysis, and reporting.</li><li>Perform vulnerability assessments, remediation tracking, and risk reporting.</li><li>Deploy, configure, and optimize SOC tools and solutions; assist SOC teams in analysis and incident response.</li><li>Perform log fine-tuning and monitoring improvements across security systems.</li><li>Test, implement, and enhance Endpoint Detection &amp; Response (EDR) solutions.</li><li>Support or conduct penetration testing and red teaming (internal or external engagements).</li></ul>Required Skills (Strong proficiency in most of them)<ul><li>ISO 27001 Compliance</li><li>Data Loss Prevention (DLP)</li><li>Microsoft Purview &amp; Compliance tools</li><li>Azure Security Administration</li><li>Digital Forensics</li><li>Vulnerability Management</li><li>SOC Solutions (Implementation + Analysis)</li><li>Log Fine-Tuning</li><li>EDR Solutions (Testing &amp; Implementation)</li><li>Penetration Testing / Red Teaming</li></ul>Preferred CertificationsCandidates with any of the following certifications will be prioritized (not all required):<ul><li>SC-100 &ndash; Microsoft Cybersecurity Architect</li><li>ISO 27001 Audit Associate</li><li>Certified Ethical Hacker (CEH v12)</li><li>DLP Administrator Certification</li><li>SC-200 &ndash; Microsoft SOC Analyst</li><li>AZ-500 &ndash; Microsoft Azure Security Engineer Associate</li><li>Cloud Practitioner Certification</li><li>SC-300 &ndash; Microsoft Identity &amp; Access Administrator Associate</li></ul>Ideal Candidate Profile<ul><li>Strong technical understanding of cloud, endpoint, and network security.</li><li>Ability to work with minimal supervision and drive security initiatives.</li><li>Strong documentation, analytical, and problem-solving skills.</li><li>Exposure to enterprise security environments or consulting projects.</li></ul>Job Type: Full-timePay: AED10,000.00 - AED20,000.00 per monthApplication Question(s):<ul><li>How many years of hands-on experience do you have in Information Security (NOT IT support or networking)?</li><li>Have you directly worked with ISO 27001 (implementation, audits, or compliance)?</li><li>Have you implemented or managed any DLP solution (e.g., Microsoft, Symantec, Forcepoint)?</li><li>Rate your experience with Azure Security (0&ndash;10).</li></ul>What key configurations have you handled?<ul><li>Have you ever worked in a SOC environment (as an analyst or engineer)?</li><li>Do you have practical experience with EDR platforms (CrowdStrike, Defender, SentinelOne, etc.)?</li><li>Have you performed vulnerability assessments or penetration testing yourself (not just coordinating)?</li><li>List the relevant certifications you currently hold from this list:</li></ul>SC-100, SC-200, SC-300, AZ-500, CEH v12, ISO 27001, DLP Admin, Cloud Practitioner.<ul><li>What&rsquo;s your notice period? What&rsquo;s your expected salary range?</li></ul>

Information Security Consultant

Search 5695+ Cybersecurity consultant jobs near you this December. New roles added regularly across leading industries. Apply today.