Back to jobs

Senior Cybersecurity Governance Consultant - 2-Year Engagement

MENA ConsultantRemote (Worldwide)Posted 1w ago
Compliance Analyst
Full Time
Remote
Craft my tailored resume free

Free to start · No card

Job description

Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).

We are seeking a Senior Cybersecurity Governance Consultant to develop and improve the organization’s cybersecurity governance framework, strategy, roadmap, policies, and standards. The role will manage the cybersecurity control library and Minimum Baseline Security Standards (MBSS), coordinate policy approvals and exception processes, and maintain documentation for audits and regulatory reviews. The consultant will work across business and technical teams and provide governance reporting and insights to senior management.

Key Requirements

  • Strong experience developing and improving cybersecurity governance frameworks, strategies, and roadmaps.
  • Experience drafting, reviewing, and managing approval cycles for cybersecurity policies, standards, procedures, and guidelines.
  • Experience developing and maintaining a cybersecurity control library aligned with regulatory and business requirements.
  • Familiarity with Minimum Baseline Security Standards (MBSS), including reviewing and updating baseline requirements and templates.
  • Experience managing policy exceptions, waivers, and risk acceptance processes, including documentation and periodic review.
  • Ability to maintain governance records and supporting evidence for audits, assessments, and regulatory reviews.
  • Experience developing governance KPIs, KRIs, dashboards, and executive reports.
  • Experience coordinating governance work with infrastructure, legal, quality, and business stakeholders.

Key Responsibilities

  • Facilitate policy exception management processes and ensure approved exceptions, waivers, and risk acceptance requests are documented, monitored, reviewed, and managed in accordance with governance requirements.
  • Develop, implement, maintain, and continuously improve the organization's cybersecurity governance framework, strategy, roadmap, and related initiatives.
  • Develop, review, update, and manage approval cycles for cybersecurity policies, standards, frameworks, procedures, guidelines, and governance artifacts.
  • Develop, maintain, and manage the Cybersecurity Control Library to ensure alignment with governance, regulatory, and business requirements.
  • Review and manage updates to Minimum Baseline Security Standards (MBSS), including template development and continuous enhancement.
  • Ensure cybersecurity governance documentation, deliverables, records, and supporting artifacts are maintained and readily available for audits, assessments, and regulatory reviews.
  • Prepare governance reports, dashboards, presentations, and executive briefings for senior management, governance committees, and key stakeholders.
  • Develop, monitor, report, and improve cybersecurity governance Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
  • Facilitate engagement and coordination with Infrastructure, Quality, Legal, Business Units, and other stakeholders during the development, review, and approval of governance artifacts.
  • Manage governance-related communications, consultations, clarifications, and coordination activities across internal stakeholders.
  • Support awareness and communication initiatives related to cybersecurity governance, policies, standards, controls, and organizational responsibilities.
  • Drive continuous improvement initiatives to enhance cybersecurity governance eUectiveness, compliance posture, and organizational maturity.

If you would like to know more about theGlobal Consulting BootcampVisit:
If you would like to know more about theMC ClubVisit:

Originally posted on Himalayas

Prepare your application

Use the description above to assess your fit for MENA Consultant. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.

Match requirements to evidence

Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.

Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.

Check the working arrangement

Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.

Review before submitting

Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.

Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.

Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.