MENA Consultant

Security Engineer

• Assess and validate the implementation and effectiveness of cybersecurity controls against regulatory requirements, security frameworks, MBSS, and approved configuration baselines
• Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets
• Review security controls and recommend remediation or improvement actions
• Manage compliance evidence collection, documentation, and repositories for audits, assessments, and regulatory submissions
• Support internal and external audits, findings remediation, and corrective action tracking
• Support cybersecurity risk assessments and management of regulatory and compliance risks
• Assist in developing and monitoring compliance-related KRIs and KPIs
• Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders
• Develop, maintain, and review cybersecurity policies, standards, procedures, and controls
• Monitor regulatory and MBSS requirement updates and implement new compliance obligations
• Communicate technical and regulatory requirements to technical and non-technical stakeholders
• Conduct compliance assessments of firewall rules, internet-facing systems, cloud services, and SIEM security monitoring controls
• Verify compliance with secure configuration baselines and hardening standards for servers, databases, operating systems, and network devices
• Evaluate backup, disaster recovery, and business continuity controls
• Review application security controls for SSDLC compliance
• Analyze vulnerability assessment and penetration testing results and track remediation activities

Cybersecurity Compliance, Technical Controls Consultant

ServiceNow

• Operate and continuously enhance the centralized GRC request intake platform using Archer and/or ServiceNow
• Develop, configure, and maintain automated workflows, approval processes, notifications, and service request routing mechanisms
• Support AI-powered capabilities to extract, classify, validate, and format compliance and governance-related data
• Integrate portals, email, web forms, APIs, and chat interfaces into a unified request management workflow
• Configure automated request triaging using intent recognition, risk scoring, prioritization rules, and workload balancing
• Optimize AI capabilities to classify, route, and automate eligible request resolution
• Enable auto-assignment and workload distribution based on service, risk, priority, and capacity criteria
• Monitor automated request resolution performance and identify opportunities to increase straight-through processing
• Coordinate escalation of complex requests to Risk, Compliance, TPRM, Resilience, or GRC specialists through SLA-compliant closure
• Develop dashboards, operational metrics, and management reports on request volumes, AI resolution rates, turnaround times, and service performance
• Support ticket lifecycle management, stakeholder notifications, activity verification, and request closure
• Optimize workflows, automation coverage, and user experience
• Support automation roadmap execution and operating model maturity initiatives
• Collaborate with business, risk, compliance, cybersecurity, and technology teams on governance-aligned automation solutions
• Provide recommendations for operating model optimization, resource rationalization, and automation expansion
• Maintain and manage a ticketing system and respond to tickets promptly

Senior GRC Automation Consultant – ServiceNow, Archer

• Assist with planning and delivering Risk & Resilience engagements in line with approved methodologies, project plans, and timelines
• Perform cybersecurity, technology, and enterprise risk assessments covering customer systems, platforms, digital services, technology initiatives, regulatory-driven assessments, NCA compliance activities, and ad hoc risk reviews
• Create, maintain, and improve risk registers throughout the full risk lifecycle
• Develop, track, and report on risk treatment plans, mitigation initiatives, and remediation activities
• Coordinate risk acceptance and exception management processes, including impact assessments, compensating controls, stakeholder engagement, approvals, and revalidation
• Assess technology changes, cloud deployments, digital transformation initiatives, third-party services, and strategic projects for emerging risks
• Deliver risk advisory services across infrastructure, cloud security, cybersecurity controls, secure software development, digital platforms, data protection, and emerging technologies
• Improve cybersecurity risk management frameworks, methodologies, standards, templates, and governance processes
• Contribute to cybersecurity risk strategies, roadmaps, risk appetite statements, and mitigation priorities
• Work with business, technology, cybersecurity, and project teams to provide actionable recommendations
• Track KRIs, risk trends, emerging threats, and overdue remediation actions
• Prepare and present risk reports, dashboards, management updates, and executive-level insights
• Promote a risk-aware culture through stakeholder engagement, awareness activities, workshops, and advisory sessions
• Ensure alignment with internal policies, regulatory requirements, and industry standards

Senior Cybersecurity Risk & Resilience Consultant

Insurance

• Assess and manage risks across the full vendor lifecycle, from onboarding and due diligence through ongoing monitoring and offboarding
• Evaluate third-party cybersecurity, technology, operational, privacy, compliance, and resilience risks
• Track findings and remediation and strengthen TPRM frameworks and reporting
• Support planning and execution of Third-Party Risk Management engagements in alignment with project objectives, methodologies, and delivery timelines
• Conduct inherent and residual risk assessments for third parties, vendors, service providers, partners, and outsourced services
• Perform risk-based due diligence reviews for new and existing third-party engagements
• Evaluate third-party security controls, governance practices, and compliance posture against customer requirements, regulatory obligations, and industry standards
• Review vendor assessment responses, supporting evidence, audit reports, certifications, and independent assurance reports
• Facilitate vendor risk assessments throughout onboarding, periodic reassessments, contract renewals, significant changes, and offboarding
• Identify and assess risks associated with cloud services, managed services, SaaS platforms, telecommunications providers, and strategic technology partners
• Evaluate concentration, dependency, fourth-party, and critical supplier risks
• Collaborate with procurement, legal, cybersecurity, compliance, privacy, and business stakeholders
• Develop and maintain third-party risk registers, assessment records, risk exceptions, remediation plans, and governance documentation
• Track findings, remediation actions, and risk treatment plans
• Facilitate third-party risk acceptance and exception processes
• Perform ongoing monitoring of critical and high-risk vendors
• Assess third-party business continuity, disaster recovery, and operational resilience capabilities
• Review contractual security and risk requirements, including security clauses, SLAs, data protection obligations, audit rights, and incident notification requirements
• Support development and enhancement of TPRM frameworks, methodologies, procedures, standards, and assessment templates
• Analyze vendor risk trends, assessment outcomes, and risk exposures
• Prepare management reports, dashboards, risk metrics, and executive presentations
• Promote awareness and adoption of TPRM requirements
• Ensure alignment with customer policies, regulatory requirements, and industry frameworks related to vendor risk management, cybersecurity, operational resilience, and supply chain security
• Work closely with procurement, legal, cybersecurity, compliance, and business teams to support informed vendor decisions

Senior Third-Party Risk Management Consultant

• Facilitate policy exception management processes and ensure approved exceptions, waivers, and risk acceptance requests are documented, monitored, reviewed, and managed according to governance requirements
• Develop, implement, maintain, and continuously improve the organization's cybersecurity governance framework, strategy, roadmap, and related initiatives
• Develop, review, update, and manage approval cycles for cybersecurity policies, standards, frameworks, procedures, guidelines, and governance artifacts
• Develop, maintain, and manage the Cybersecurity Control Library
• Review and manage updates to Minimum Baseline Security Standards (MBSS), including template development and continuous enhancement
• Maintain cybersecurity governance documentation, deliverables, records, and supporting artifacts for audits, assessments, and regulatory reviews
• Prepare governance reports, dashboards, presentations, and executive briefings for senior management, governance committees, and key stakeholders
• Develop, monitor, report, and improve cybersecurity governance KPIs and KRIs
• Coordinate with Infrastructure, Quality, Legal, Business Units, and other stakeholders during governance artifact development, review, and approval
• Manage governance-related communications, consultations, clarifications, and coordination across internal stakeholders
• Support awareness and communication initiatives related to cybersecurity governance, policies, standards, controls, and organizational responsibilities
• Drive continuous improvement initiatives to enhance cybersecurity governance effectiveness, compliance posture, and organizational maturity

Cybersecurity Compliance, Technical Controls Consultant

Senior GRC Automation Consultant – ServiceNow, Archer

Senior Cybersecurity Risk & Resilience Consultant

Senior Third-Party Risk Management Consultant

Senior Cybersecurity Governance Consultant