Cybersecurity & Compliance Consultant at BasharSoft

Worldwide

<h2><strong>Cybersecurity &amp; Compliance Consultant – SAMA, NCA ECC, ISO 27001, BCM</strong></h2><p><strong>Location:</strong> Cairo – Egypt<br/><strong>Employment Type:</strong> Full-Time<br/><strong>Reporting to:</strong> Cybersecurity Consulting Director<br/><strong>Company:</strong> Confidential Saudi Cybersecurity Consultancy (Financial, Fintech &amp; Critical Infrastructure)</p><h3><strong>Role Summary</strong></h3><p>We are seeking a <strong>Senior Cybersecurity &amp; Compliance Consultant</strong> with strong hands-on experience delivering SAMA Cybersecurity Framework, NCA Essential Cybersecurity Controls (ECC), ISO 27001, and Business Continuity Management (BCM) services.</p><p>The consultant will lead regulatory assessments, multi-phase implementation programs, governance design, policy development, technical control validation, and closure of audit findings for regulated Saudi entities. The role also includes client-facing consulting, pre-sales support, solution design, and post-sales delivery, with eligibility for performance-based bonuses linked to sales contribution.</p><h3><strong>Core Responsibilities</strong></h3><h3><strong>Cybersecurity, GRC &amp; Compliance Delivery</strong></h3><ul><li>Lead full SAMA CSF assessments including maturity scoring, evidence review, control validation, remediation planning, and executive dashboards.</li><li>Conduct NCA ECC compliance assessments, including technical control validation, policy reviews, and alignment with cloud and security architectures.</li><li>Perform ISO 27001 ISMS gap assessments, documentation development, internal audits, certification readiness, and risk treatment planning.</li><li>Deliver BCM / ISO 22301 services including BIAs, risk assessments, RTO/RPO definition, DR testing, and resilience program design.</li><li>Conduct detailed gap analysis sessions with technical and operational teams.</li><li>Review and validate cybersecurity controls such as IAM, network security, monitoring, incident response, logging, disaster recovery, and cloud security.</li><li>Design and develop governance documentation including policies, procedures, standards, baselines, guidelines, and SOPs.</li><li>Lead workshops, awareness sessions, tabletop exercises, resilience drills, and certification readiness workshops.</li><li>Prepare executive and board-level presentations summarizing risks, gaps, and cybersecurity priorities.</li></ul><h3><strong>Engagement, Client Management &amp; Commercial Support</strong></h3><h3><strong>Client-Facing Responsibilities</strong></h3><ul><li>Lead end-to-end consulting engagements and manage scope, timelines, and deliverables.</li><li>Conduct stakeholder interviews, steering committee briefings, and management reporting.</li><li>Provide strategic cybersecurity and compliance advisory aligned with Saudi regulatory requirements.</li><li>Support clients during audits, regulatory inspections, and compliance reviews.</li></ul><h3><strong>Pre-Sales &amp; Sales Support</strong></h3><ul><li>Participate in scoping calls and requirements analysis with prospective clients.</li><li>Support proposal development, method statements, and technical/commercial documentation.</li><li>Present solution approaches, methodologies, and engagement plans during pre-sales meetings.</li><li>Assist in positioning cybersecurity and compliance services to banks, fintechs, SMEs, and critical infrastructure entities.</li><li>Contribute to upsell opportunities including follow-up assessments, governance enhancements, and extended compliance programs.</li></ul><h3><strong>Post-Sales &amp; Implementation Responsibilities</strong></h3><ul><li>Guide client teams in implementing cybersecurity and governance controls.</li><li>Track remediation progress and validate closure of gaps through evidence review.</li><li>Support ISMS and BCMS implementation, SOP establishment, and operationalization.</li><li>Conduct readiness assessments and validation testing prior to certification or regulatory review.</li><li>Review deliverables produced by junior consultants and ensure quality and regulatory alignment.</li><li>Maintain consistent use of consulting templates, frameworks, and methodologies.</li></ul><h3><strong>Key Deliverables</strong></h3><ul><li>SAMA CSF, NCA ECC, ISO 27001, and BCM assessment reports.</li><li>Governance documentation including policies, procedures, standards, and baselines.</li><li>Remediation plans, audit closure evidence, ISMS and BCMS documentation.</li><li>Executive summaries, maturity dashboards, and risk heatmaps.</li><li>DR test results, BCM exercise reports, and ISMS internal audit reports.</li></ul><h3><strong>Qualifications &amp; Experience</strong></h3><p><strong>Technical Requirements</strong></p><ul><li>Strong, proven knowledge of:<ul><li>SAMA Cybersecurity Framework (mandatory)</li><li>NCA Essential Cybersecurity Controls</li><li>ISO 27001 (mandatory)</li><li>BCM / ISO 22301 (highly preferred)</li></ul></li><li>Solid understanding of enterprise security controls and governance documentation.</li></ul><p><strong>Professional Experience</strong></p><ul><li>6–12+ years of experience in cybersecurity, GRC, BCM, or audit.</li><li>Mandatory consulting experience with direct client interaction and delivery.</li><li>Preferred experience in regulated sectors such as banking, fintech, telecom, or energy.</li></ul><p><strong>Preferred Certifications</strong></p><ul><li>ISO 27001 Lead Implementer / Lead Auditor</li><li>ISO 22301 Lead Implementer / Lead Auditor</li><li>CISSP, CISM, CRISC</li><li>CompTIA Security+, cloud or NIST-related certifications (plus)</li></ul><h3><strong>Competencies &amp; Behavioral Skills</strong></h3><ul><li>Strong analytical skills and ability to translate regulatory requirements into actionable plans.</li><li>Excellent documentation, reporting, and presentation skills.</li><li>Confident client handling and senior stakeholder engagement.</li><li>Structured, professional, and business-oriented consulting mindset.</li><li>Strong time management and ability to manage multiple remote engagements.</li><li>Sales-oriented mindset with willingness to support revenue growth.</li></ul><h3><strong>Engagement Model &amp; Expectations</strong></h3><ul><li>Lead multiple cybersecurity and compliance engagements concurrently.</li><li>Maintain consulting quality aligned with Big-4 standards.</li><li>Contribute to internal knowledge base, methodologies, and templates.</li><li>Support both delivery and sales functions.</li><li>Operate independently in a fully remote environment with high accountability.</li></ul>