Senior Cybersecurity Governance Consultant - 2-Year Engagement

About the role

We are seeking a Senior Cybersecurity Governance Consultant to develop and improve the organization's cybersecurity governance framework, strategy, roadmap, policies, and standards. The role will manage the cybersecurity control library and Minimum Baseline Security Standards (MBSS), coordinate policy approvals and exception processes, and maintain documentation for audits and regulatory reviews. The consultant will work across business and technical teams and provide governance reporting and insights to senior management.

Key responsibilities

• Facilitate policy exception management processes, ensuring all approved exceptions, waivers, and risk acceptance requests are documented, monitored, reviewed, and managed in line with governance requirements.
• Develop, implement, maintain, and continuously improve the organization's cybersecurity governance framework, strategy, roadmap, and related initiatives.
• Develop, review, update, and manage approval cycles for cybersecurity policies, standards, frameworks, procedures, guidelines, and governance artifacts.
• Develop, maintain, and manage the Cybersecurity Control Library to ensure alignment with governance, regulatory, and business requirements.
• Review and manage updates to Minimum Baseline Security Standards (MBSS), including template development and continuous enhancement.
• Prepare governance reports, dashboards, presentations, and executive briefings for senior management, governance committees, and key stakeholders.

Required profile

• Strong experience developing and improving cybersecurity governance frameworks, strategies, and roadmaps.
• Experience drafting, reviewing, and managing approval cycles for cybersecurity policies, standards, procedures, and guidelines.
• Experience developing and maintaining a cybersecurity control library aligned with regulatory and business requirements.
• Familiarity with Minimum Baseline Security Standards (MBSS) and managing policy exceptions, waivers, and risk acceptance processes.
• Ability to maintain governance records and supporting evidence for audits, assessments, and regulatory reviews.

Required skills

• Cybersecurity governance frameworks
• Policy management and approval processes
• Regulatory compliance documentation
• Control library administration
• Governance KPI and KRI development