Security Engineer

• Assess and validate the implementation and effectiveness of cybersecurity controls against regulatory requirements, security frameworks, MBSS, and approved configuration baselines
• Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets
• Review security controls and recommend remediation or improvement actions
• Manage compliance evidence collection, documentation, and repositories for audits, assessments, and regulatory submissions
• Support internal and external audits, findings remediation, and corrective action tracking
• Support cybersecurity risk assessments and management of regulatory and compliance risks
• Assist in developing and monitoring compliance-related KRIs and KPIs
• Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders
• Develop, maintain, and review cybersecurity policies, standards, procedures, and controls
• Monitor regulatory and MBSS requirement updates and implement new compliance obligations
• Communicate technical and regulatory requirements to technical and non-technical stakeholders
• Conduct compliance assessments of firewall rules, internet-facing systems, cloud services, and SIEM security monitoring controls
• Verify compliance with secure configuration baselines and hardening standards for servers, databases, operating systems, and network devices
• Evaluate backup, disaster recovery, and business continuity controls
• Review application security controls for SSDLC compliance
• Analyze vulnerability assessment and penetration testing results and track remediation activities

Cybersecurity Compliance, Technical Controls Consultant

• Facilitate policy exception management processes and ensure approved exceptions, waivers, and risk acceptance requests are documented, monitored, reviewed, and managed according to governance requirements
• Develop, implement, maintain, and continuously improve the organization's cybersecurity governance framework, strategy, roadmap, and related initiatives
• Develop, review, update, and manage approval cycles for cybersecurity policies, standards, frameworks, procedures, guidelines, and governance artifacts
• Develop, maintain, and manage the Cybersecurity Control Library
• Review and manage updates to Minimum Baseline Security Standards (MBSS), including template development and continuous enhancement
• Maintain cybersecurity governance documentation, deliverables, records, and supporting artifacts for audits, assessments, and regulatory reviews
• Prepare governance reports, dashboards, presentations, and executive briefings for senior management, governance committees, and key stakeholders
• Develop, monitor, report, and improve cybersecurity governance KPIs and KRIs
• Coordinate with Infrastructure, Quality, Legal, Business Units, and other stakeholders during governance artifact development, review, and approval
• Manage governance-related communications, consultations, clarifications, and coordination across internal stakeholders
• Support awareness and communication initiatives related to cybersecurity governance, policies, standards, controls, and organizational responsibilities
• Drive continuous improvement initiatives to enhance cybersecurity governance effectiveness, compliance posture, and organizational maturity

Senior Cybersecurity Governance Consultant

• Assist with planning and delivering Risk & Resilience engagements in line with approved methodologies, project plans, and timelines
• Perform cybersecurity, technology, and enterprise risk assessments covering customer systems, platforms, digital services, technology initiatives, regulatory-driven assessments, NCA compliance activities, and ad hoc risk reviews
• Create, maintain, and improve risk registers throughout the full risk lifecycle
• Develop, track, and report on risk treatment plans, mitigation initiatives, and remediation activities
• Coordinate risk acceptance and exception management processes, including impact assessments, compensating controls, stakeholder engagement, approvals, and revalidation
• Assess technology changes, cloud deployments, digital transformation initiatives, third-party services, and strategic projects for emerging risks
• Deliver risk advisory services across infrastructure, cloud security, cybersecurity controls, secure software development, digital platforms, data protection, and emerging technologies
• Improve cybersecurity risk management frameworks, methodologies, standards, templates, and governance processes
• Contribute to cybersecurity risk strategies, roadmaps, risk appetite statements, and mitigation priorities
• Work with business, technology, cybersecurity, and project teams to provide actionable recommendations
• Track KRIs, risk trends, emerging threats, and overdue remediation actions
• Prepare and present risk reports, dashboards, management updates, and executive-level insights
• Promote a risk-aware culture through stakeholder engagement, awareness activities, workshops, and advisory sessions
• Ensure alignment with internal policies, regulatory requirements, and industry standards

Security Engineer jobs in Jordan

Cybersecurity Compliance, Technical Controls Consultant

Senior Cybersecurity Governance Consultant

Senior Cybersecurity Risk & Resilience Consultant