Senior Cybersecurity Risk & Resilience Consultant - 2-Year Engagement
At MENA Consultant · Remote; Head Office, عمّان, Amman, Jordan
- Security
- Senior
See how well you match Match me reads your CV and picks the jobs that suit you best.
Get jobs like this within hours Radar is free for 7 days with just your email, no card.
Where you can work from
Open to Jordan
“Head Office, عمّان, Amman, Jordan”
From the job board field.
Report a mistake
- Posted
- 29 September 2026
- First seen by us
- 15 October 2026
- Last checked
- 9 minutes ago
Job description
From MENA Consultant’s job post, as they wrote it.
Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).
We are seeking a Senior Cybersecurity Risk & Resilience Consultant with 8–10 years of experience to deliver cybersecurity and technology risk assessments and advise on risks across systems, cloud environments, digital initiatives, and third-party services. The consultant will manage risk registers, treatment plans, and exception processes; strengthen risk management frameworks; and provide clear reporting to senior stakeholders. The role requires knowledge of NCA ECC, SAMA requirements, and ISO 27001.
Read the full description
Key Requirements
* 8–10 total years of experience.
* Proven experience in cybersecurity risk and resilience consulting.
* Strong experience conducting cybersecurity and technology risk assessments across systems, digital services, cloud environments, and technology projects.
* Hands-on experience managing risk registers and the full risk lifecycle, including assessment, treatment, acceptance, exceptions, and ongoing monitoring.
* Experience developing and tracking risk treatment and remediation plans, including evaluation of control gaps and compensating controls.
* Ability to advise on risks related to infrastructure, cloud security, third parties, secure software development, and data protection.
* Experience developing or improving cybersecurity risk frameworks, methodologies, risk appetite statements, and key risk indicators (KRIs).
* Knowledge of applicable frameworks and regulations, particularly NCA ECC, SAMA requirements, and ISO 27001.
Key Responsibilities
* Assist with planning and delivering Risk & Resilience engagements in line with approved methodologies, project plans, and timelines.
* Perform cybersecurity, technology, and enterprise risk assessments covering customer systems, platforms, digital services, and technology initiatives, as well as regulatory-driven assessments, including NCA compliance activities, and ad hoc risk reviews.
* Create, maintain, and improve risk registers, tracking risks from identification and assessment through treatment, acceptance, and ongoing monitoring.
* Develop, track, and report on risk treatment plans, mitigation initiatives, and remediation activities to support timely closure of identified risks and control gaps.
* Coordinate risk acceptance and exception management processes, including impact assessments, evaluation of compensating controls, stakeholder engagement, approvals, and periodic revalidation.
* Assess major technology changes, cloud deployments, digital transformation initiatives, third-party services, and strategic projects to identify emerging risks and recommend appropriate risk responses.
* Deliver risk advisory services across enterprise infrastructure, cloud security, cybersecurity controls, secure software development, digital platforms, data protection, and emerging technologies.
* Help maintain and continuously improve the customer’s cybersecurity risk management framework, methodologies, standards, templates, and governance processes.
* Contribute to developing and periodically updating cybersecurity risk strategies, risk roadmaps, risk appetite statements, and risk mitigation priorities in alignment with business objectives.
* Work with business, technology, cybersecurity, and project teams to offer actionable risk recommendations and enable informed, risk-based decisions.
* Track key risk indicators (KRIs), risk trends, emerging threats, and overdue remediation actions, providing insights for proactive risk management.
* Prepare and present risk reports, dashboards, management updates, and executive-level insights to relevant stakeholders and governance forums.
* Encourage a risk-aware culture through stakeholder engagement, awareness activities, workshops, and advisory sessions across customer business units.
* Ensure alignment with applicable internal policies, regulatory requirements, and industry standards, including NCA ECC, SAMA requirements, ISO 27001, and other relevant frameworks.
----------------------------------------
If you would like to know more about the Global Consulting Bootcamp Visit: https://caseinpointco.com/global-consultant-bootcamp/
If you would like to know more about the MC Club Visit: https://menaconsultant.com/mc-club/
Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.
