Senior Cybersecurity Risk & Resilience Consultant
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Responsibilities:
- Assist with planning and delivering Risk & Resilience engagements in line with approved methodologies, project plans, and timelines
- Perform cybersecurity, technology, and enterprise risk assessments covering customer systems, platforms, digital services, technology initiatives, regulatory-driven assessments, NCA compliance activities, and ad hoc risk reviews
- Create, maintain, and improve risk registers throughout the full risk lifecycle
- Develop, track, and report on risk treatment plans, mitigation initiatives, and remediation activities
- Coordinate risk acceptance and exception management processes, including impact assessments, compensating controls, stakeholder engagement, approvals, and revalidation
- Assess technology changes, cloud deployments, digital transformation initiatives, third-party services, and strategic projects for emerging risks
- Deliver risk advisory services across infrastructure, cloud security, cybersecurity controls, secure software development, digital platforms, data protection, and emerging technologies
- Improve cybersecurity risk management frameworks, methodologies, standards, templates, and governance processes
- Contribute to cybersecurity risk strategies, roadmaps, risk appetite statements, and mitigation priorities
- Work with business, technology, cybersecurity, and project teams to provide actionable recommendations
- Track KRIs, risk trends, emerging threats, and overdue remediation actions
- Prepare and present risk reports, dashboards, management updates, and executive-level insights
- Promote a risk-aware culture through stakeholder engagement, awareness activities, workshops, and advisory sessions
- Ensure alignment with internal policies, regulatory requirements, and industry standards
Requirements:
- 8–10 total years of experience
- Proven experience in cybersecurity risk and resilience consulting
- Strong experience conducting cybersecurity and technology risk assessments across systems, digital services, cloud environments, and technology projects
- Hands-on experience managing risk registers and the full risk lifecycle, including assessment, treatment, acceptance, exceptions, and ongoing monitoring
- Experience developing and tracking risk treatment and remediation plans, including evaluation of control gaps and compensating controls
- Ability to advise on risks related to infrastructure, cloud security, third parties, secure software development, and data protection
- Experience developing or improving cybersecurity risk frameworks, methodologies, risk appetite statements, and key risk indicators (KRIs)
- Knowledge of NCA ECC, SAMA requirements, and ISO 27001
- Fluency in Arabic and English, written and spoken
Benefits:
- 2-year project engagement
- Global Consulting Bootcamp information provided
- MC Club information provided
Similar Jobs
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.
Application Security Researcher
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.
Cloud Security Administrator
Cloud Security Administrator securing Ballard Spahr’s national law-firm cloud infrastructure. Managing Azure security controls, access, monitoring, audits, and incident response.
SAP S/4HANA Defense & Security Functional Lead
SAP S/4HANA Defense & Security Functional Lead modernizing Department of War operations for CSCI Consulting. Leading transformation workshops, solution design, implementation, testing, and deployment.
Technical Lead – Chief Security Architect, Engineer
Technical Lead and Chief Security Architect securing Federal Government enterprise systems at PingWind. Leading architecture reviews, risk strategies, and modernization across cloud and emerging technologies.
Cloud Security Architect – Engineer
Cloud Security Architect/Engineer designing and assessing secure enterprise cloud solutions for PingWind’s Federal Government clients. Aligning modernization with FedRAMP, RMF, authorization, and architecture requirements.
Principal Consultant – AI Security
Principal AI Security Consultant leading enterprise AI security architecture and client engagements. Trace3 provides transformative IT solutions and consulting services to organizations across the United States.
Principal Cloud Security Engineer
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI-enabled platforms. Establishing cloud, Kubernetes, identity, and software-delivery security standards across USA and Canada.
Senior Infrastructure Security Engineer
Senior Infrastructure Security Engineer securing Headway’s mental healthcare platform and AWS infrastructure. Building guardrails, cloud security posture, and security operations for large-scale provider and patient systems.
Principal OT Cybersecurity – ICS Security Architect
Principal OT cybersecurity architect leading federal critical-infrastructure modernization for Peraton. Evaluating ICS and enterprise security solutions, vendors, and requirements.
Senior OT Cybersecurity, ICS Security Architect – Part-Time
Part-time OT/ICS cybersecurity architect supporting Peraton’s federal critical-infrastructure modernization program. Evaluating security products, defining requirements, and guiding procurement recommendations.