Cyber Security Consultant

Dicetek LLC; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A cybersecurity firm in Dubai is seeking a professional with 8–12 years of experience in cybersecurity governance to lead the development and enforcement of policies and standards. The ideal candidate will oversee audits, compliance programs, and conduct risk assessments. A Bachelor's degree in IT/Computer Science or Cybersecurity is required along with relevant certifications such as CISM or CISSP. Strong communication and documentation skills are essential for this role.

Qualifications

• Minimum 8–12 years of experience in cybersecurity governance.
• Bachelor’s degree in IT/Computer Science, Cybersecurity, or related field.
• Deep knowledge of security frameworks like ISO 2700x and NIST CSF.

Responsibilities

• Lead development and enforcement of cybersecurity policies.
• Perform ISMS programs and internal audits.
• Conduct cybersecurity risk assessments and reviews.

Skills

Cybersecurity governance

Risk management

Communication skills

Documentation skills

Education

Bachelor's degree in IT/Computer Science or Cybersecurity

Tools

ISO frameworks

NIST CSF

CISM certification

CISSP certification

Job description

8–12+ years of experience in experience in cybersecurity governance, GRC including proven leadership in technical and security-driven environments.

Bachelor’s degree in IT/Computer Science, Cybersecurity, or related field (postgraduate qualifications highly regarded).

Deep knowledge of security frameworks (ISO 2700x, NIST CSF), risk management, and security architecture.

Knowledge of ISO 27001, 22301, 20000, PDPL, NIST CSF, CIS controls.

Experience managing audits, risk registers, policies, and compliance programs.

Strong communication, and documentation skills.

Certification:

• CISM or equivalent certification CISSP/CRISC
• ISO 27001 Lead Auditor/Implementer certification
• Cloud security certifications (Azure/AWS Security).

Roles & Responsibilities

• Lead development, maintenance, and enforcement of cybersecurity policies, standards, and procedures.
• Perform ISMS programs, internal audits, ISO certification cycles.
• Perform cybersecurity risk assessments, risk treatment plans, and tracking
• Coordinate BIA, BCP, and DR activities; and ensure alignment with ISO 22301.
• Lead third-party security assessments, vendor onboarding security validation, and review of PT/MAST/API security scan reports.
• Lead cybersecurity awareness programs and technical trainings for IT and business teams.
• Oversee cybersecurity projects across Infra, Applications, Data, and Governance teams, ensuring secure design and implementation.
• Prepare KPIs, audit trackers, and report findings to senior leadership
• Coordinate security reviews for new applications, APIs, cloud onboarding, and integrations.
• Prepare cybersecurity awareness materials and conduct technical sessions.