Cyber Security Consultant

Legitbytes; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

Legitbytes in Dubai, UAE seeks an experienced Cybersecurity Compliance GRC Consultant for a 12-week client engagement onsite. You will perform a cybersecurity assessment and gap analysis focused on NIST SP 800-171 and CMMC Level 2, reviewing controls, policies and configurations.

The role requires close collaboration with client stakeholders to define remediation steps and a practical roadmap for current and future compliance.

Qualifications

• 3+ years in cybersecurity GRC, compliance or infrastructure security.
• Hands-on with NIST SP 800-171, NIST SP 800-53 or CMMC.
• Experience performing gap assessments and remediation recommendations.
• Strong written and verbal communication with clients.

Responsibilities

• Conduct cybersecurity and compliance gap assessments.
• Assess alignment with NIST SP 800-171 and CMMC Level 2.
• Review security controls, policies, procedures and configurations.
• Identify gaps, risks and remediation requirements.
• Prepare findings and documentation; develop remediation roadmap.
• Engage with client stakeholders during discovery and assessment.
• Support cybersecurity engineering discussions as needed.

Skills

GRC experience

NIST SP 800-171

CMMC

Cybersecurity assessment

Client-facing

Job description

Cybersecurity Compliance Consultant NIST 800-171 CMMCLocation Dubai UAE OnsiteDuration 12 WeeksEngagement Contract Full-time onsiteResources 1 2

About the Role

We are looking for an experienced Cybersecurity Compliance GRC Consultant to support a 12-week client engagement in Dubai The consultant will conduct a cybersecurity assessment and gap analysis of the client s IT environment with a primary focus on NIST SP 800-171 and CMMC Level 2 requirements The role will involve reviewing existing security controls policies procedures and technical configurations identifying gaps and developing a practical roadmap for remediation and future compliance readiness The environment includes approximately 4 systems and 60 80 servers

Key Responsibilities

• Conduct cybersecurity and compliance gap assessments
• Assess alignment with NIST SP 800-171 and CMMC Level 2 requirements
• Review security controls policies procedures and technical configurations
• Identify security gaps risks and remediation requirements
• Review infrastructure access control vulnerability management logging incident response and configuration management
• Prepare assessment findings and documentation
• Develop a target-state remediation and compliance roadmap
• Work directly with client stakeholders during discovery and assessment
• Support discussions regarding potential cybersecurity engineering and remediation activities

Requirements

• 3 years of experience in cybersecurity GRC security assessment compliance or infrastructure security
• Hands-on experience with NIST SP 800-171 NIST SP 800-53 CMMC or similar frameworks
• Experience conducting cybersecurity gap compliance or readiness assessments
• Strong understanding of enterprise infrastructure and security controls
• Experience preparing security assessment documentation and remediation recommendations
• Strong communication and client-facing skills
• Willingness to work onsite in Dubai for the full 12-week engagement

Preferred

• CMMC Registered Practitioner RP CMMC Certified Assessor CCA or relevant CMMC training
• Experience with DoD contractors or CUI environments
• Experience with NIST 800-171A SSPs POA Ms or SPRS
• Experience across Windows Linux cloud network and enterprise security environments
• Previous cybersecurity consulting or client-facing assessment experience

Important

This engagement is focused on cybersecurity gap analysis discovery and target-state planning The client is not currently undergoing a formal CMMC assessment