Senior Cybersecurity Risk & Resilience Consultant (2‑Year Contract)

About the role

We are looking for a senior consultant with 8‑10 years of experience to lead cybersecurity risk and resilience engagements for a remote client. The role involves delivering risk assessments across systems, cloud environments, digital initiatives and third‑party services, and reporting findings to senior stakeholders.

Key responsibilities

• Plan and execute risk & resilience engagements following approved methodologies and timelines.
• Perform comprehensive cybersecurity, technology and enterprise risk assessments, including regulatory‑driven reviews such as NCA compliance.
• Create, maintain and improve risk registers, tracking risks from identification through treatment and ongoing monitoring.
• Develop, track and report on risk treatment plans, mitigation initiatives and remediation activities.
• Coordinate risk acceptance and exception management, including impact assessments and stakeholder approvals.
• Assess major technology changes, cloud deployments, digital transformation projects and third‑party services to identify emerging risks.
• Support continuous improvement of the client’s cybersecurity risk management framework, methodologies and governance processes.

Required profile

• 8–10 years of experience in cybersecurity risk and resilience consulting.
• Proven ability to conduct risk assessments across systems, digital services, cloud environments and technology projects.
• Hands‑on experience managing risk registers and the full risk lifecycle (assessment, treatment, acceptance, exceptions, monitoring).
• Experience developing and tracking risk treatment and remediation plans, evaluating control gaps and compensating controls.
• Knowledge of NCA ECC, SAMA requirements and ISO 27001 frameworks.

Required skills

• Knowledge of NCA ECC regulatory framework.
• Familiarity with SAMA requirements.
• Understanding of ISO 27001 information security standard.
• Cloud security concepts and best practices.
• Secure software development and data protection principles.