Cybersecurity Compliance, Technical Controls Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Responsibilities:
- Assess and validate the implementation and effectiveness of cybersecurity controls against regulatory requirements, security frameworks, MBSS, and approved configuration baselines
- Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets
- Review security controls and recommend remediation or improvement actions
- Manage compliance evidence collection, documentation, and repositories for audits, assessments, and regulatory submissions
- Support internal and external audits, findings remediation, and corrective action tracking
- Support cybersecurity risk assessments and management of regulatory and compliance risks
- Assist in developing and monitoring compliance-related KRIs and KPIs
- Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders
- Develop, maintain, and review cybersecurity policies, standards, procedures, and controls
- Monitor regulatory and MBSS requirement updates and implement new compliance obligations
- Communicate technical and regulatory requirements to technical and non-technical stakeholders
- Conduct compliance assessments of firewall rules, internet-facing systems, cloud services, and SIEM security monitoring controls
- Verify compliance with secure configuration baselines and hardening standards for servers, databases, operating systems, and network devices
- Evaluate backup, disaster recovery, and business continuity controls
- Review application security controls for SSDLC compliance
- Analyze vulnerability assessment and penetration testing results and track remediation activities
Requirements:
- 8–10 years of experience
- Fluency in Arabic and English, written and spoken
- Experience conducting technical cybersecurity compliance assessments against regulatory requirements, security frameworks, and MBSS
- Ability to assess implementation and effectiveness of security controls, document gaps, and recommend remediation
- Experience reviewing secure configuration baselines and golden images for servers and endpoints
- Experience with hardening standards for databases, operating systems, and network devices
- Experience assessing firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM
- Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements
- Ability to review vulnerability assessment and penetration testing results and track compliance gaps through remediation
- Experience evaluating backup, disaster recovery, and business continuity controls
- Experience managing compliance evidence, audit support, findings, and corrective action tracking
- Ability to develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs
Benefits:
- 2-year project engagement
- Access to the Global Consulting Bootcamp
- Access to the MC Club
Similar Jobs
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.
Application Security Researcher
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.
Cloud Security Administrator
Cloud Security Administrator securing Ballard Spahr’s national law-firm cloud infrastructure. Managing Azure security controls, access, monitoring, audits, and incident response.
SAP S/4HANA Defense & Security Functional Lead
SAP S/4HANA Defense & Security Functional Lead modernizing Department of War operations for CSCI Consulting. Leading transformation workshops, solution design, implementation, testing, and deployment.
Technical Lead – Chief Security Architect, Engineer
Technical Lead and Chief Security Architect securing Federal Government enterprise systems at PingWind. Leading architecture reviews, risk strategies, and modernization across cloud and emerging technologies.
Cloud Security Architect – Engineer
Cloud Security Architect/Engineer designing and assessing secure enterprise cloud solutions for PingWind’s Federal Government clients. Aligning modernization with FedRAMP, RMF, authorization, and architecture requirements.
Principal Consultant – AI Security
Principal AI Security Consultant leading enterprise AI security architecture and client engagements. Trace3 provides transformative IT solutions and consulting services to organizations across the United States.
Principal Cloud Security Engineer
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI-enabled platforms. Establishing cloud, Kubernetes, identity, and software-delivery security standards across USA and Canada.
Senior Infrastructure Security Engineer
Senior Infrastructure Security Engineer securing Headway’s mental healthcare platform and AWS infrastructure. Building guardrails, cloud security posture, and security operations for large-scale provider and patient systems.
Principal OT Cybersecurity – ICS Security Architect
Principal OT cybersecurity architect leading federal critical-infrastructure modernization for Peraton. Evaluating ICS and enterprise security solutions, vendors, and requirements.
Senior OT Cybersecurity, ICS Security Architect – Part-Time
Part-time OT/ICS cybersecurity architect supporting Peraton’s federal critical-infrastructure modernization program. Evaluating security products, defining requirements, and guiding procurement recommendations.