Cybersecurity Compliance & Technical Controls Consultant - 2-Year Engagement

Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).

Key Requirements

• Experience conducting technical cybersecurity compliance assessments against regulatory requirements, security frameworks, and MBSS.
• Ability to assess the implementation and effectiveness of security controls, document gaps, and recommend remediation.
• Experience reviewing secure configuration baselines and golden images for servers and endpoints, as well as hardening standards for databases, operating systems, and network devices.
• Experience assessing firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM.
• Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements.
• Ability to review vulnerability assessment and penetration testing results and track related compliance gaps through remediation.
• Experience evaluating backup, disaster recovery, and business continuity controls against applicable requirements.
• Experience managing compliance evidence, audit support, findings, and corrective action tracking.
• Ability to develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs.

Key Responsibilites

• Assess and validate the implementation and eUectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints.
• Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets to ensure adherence to security, regulatory, and organizational requirements.
• Review and assess security controls and recommend remediation or improvement actions where necessary.
• Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions.
• Support internal and external audits, including evidence management, findings remediation, and corrective action tracking.
• Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed.
• Assist in the development and monitoring of compliance-related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
• Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders.
• Develop, maintain, and review cybersecurity policies, standards, procedures, and controls to support compliance with MBSS and applicable regulatory requirements.
• Monitor regulatory and MBSS requirement updates and ensure timely assessment and implementation of new compliance obligations.
• Communicate technical and regulatory requirements eUectively to both technical and non-technical stakeholders.
• Conduct technical compliance assessments of firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM implementations.
• Verify compliance with secure configuration baselines and system hardening standards for servers, databases, operating systems, and network devices.
• Evaluate backup, disaster recovery, and business continuity controls to ensure compliance with regulatory, organizational, and MBSS requirements.
• Review application security controls and ensure adherence to Secure Software Development Lifecycle (SSDLC) requirements.
• Analyze vulnerability assessment and penetration testing results to identify compliance gaps and track remediation activities.

If you would like to know more about theGlobal Consulting BootcampVisit:
If you would like to know more about theMC ClubVisit:

Originally posted on Himalayas