IM&T Senior Cybersecurity Consultant & ISO 27001 Program Controller

ManpowerGroup Middle East; Dubai; On-site; USD 120,000 - 180,000; Full time

Job summary

An established industry player is seeking a highly skilled Senior Cybersecurity Consultant to lead the implementation of IT & OT cybersecurity programs. This pivotal role involves managing ISO 27001 compliance, conducting risk assessments, and developing governance documentation. You will collaborate with cross-functional teams to ensure a secure environment and mentor internal teams. This unique opportunity allows you to contribute to a forward-thinking cybersecurity strategy, protecting vital infrastructure while working in a challenging and collaborative environment.

Benefits

Health Insurance

Flexible Working Hours

Professional Development Opportunities

Performance Bonuses

Remote Work Options

Qualifications

• 20+ years in IT cybersecurity management systems.
• Demonstrated experience in ISA 62443 and ISO 27001 implementations.

Responsibilities

• Oversee IT & OT cybersecurity management systems.
• Lead ISO 27001 certification and surveillance audit process.
• Conduct cybersecurity training and awareness sessions.

Skills

Cybersecurity Management

Risk Management

ISO 27001 Compliance

ISA 62443 Implementation

Project Management

Education

Graduate or Postgraduate Degree in Cybersecurity

Tools

ISO 27001:2022 Lead Auditor Certification

CISM Certification

CRISC Certification

CGEIT Certification

GICSP Certification

Job description

About the role

Our client is seeking a highly skilled IM&T Senior Cybersecurity Consultant & ISO 27001 Program Controller to lead and support the implementation of IT & OT cybersecurity programs and ensure ongoing compliance with ISO 27001 standards. This critical role will be instrumental in executing the client's ISMS Phase 7 Program while strengthening cybersecurity governance, risk management, and assurance capabilities across diverse digital and operational landscapes.

Key responsibilities

• Oversee and manage IT & OT cybersecurity management systems in compliance with industry standards.
• Lead multiple full-cycle implementations of ISA 62443 and ISO 27001:2022 ISMS frameworks.
• Conduct and report on comprehensive IT & OT cybersecurity risk assessments and propose mitigation strategies.
• Perform internal audits, compliance checks, and site security gap assessments across multiple locations.
• Manage the ISO 27001 certification and surveillance audit process.
• Develop, review, and maintain cybersecurity governance documentation and policies.
• Act as a subject matter expert in ISO 27001 and ISA 62443, advising on secure system design, deployment, and operations.
• Collaborate with cross-functional teams to deploy and maintain a secure IT/OT environment.
• Conduct cybersecurity training, awareness sessions, and mentor internal teams.
• Ensure effective execution of the client's Cybersecurity Discipline Controls Assurance Framework (DCAF).

Qualifications & experience

• Graduate or postgraduate degree, or equivalent experience in ISMS and cybersecurity.
• 20+ years of experience in IT cybersecurity management systems.
• 10+ years in IT/OT auditing and cybersecurity reporting.
• 5+ years in OT security, preferably within industrial or energy sectors.
• Demonstrated experience in:
  • At least 2 ISA 62443 implementations.
  • At least 5 ISO 27001:2022 implementations.
• Strong project management skills with expertise in cybersecurity risk management and mitigation.
• Excellent written and verbal communication skills in English.

Mandatory certifications

• ISO 27001:2022 Lead Auditor
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified in Governance of Enterprise IT (CGEIT)
• Global Industrial Cybersecurity Professional (GICSP)
• Shell OT Security & DCAF Trainings
• ITIL V3 Foundation

Preferred certifications

ISA 62443 (IC33M, IC34M, IC37M), GRID, GCIP, CEH, OSCP, GCIA, GCIH, Security+

What we're looking for

• Deep understanding of OT cybersecurity standards (ISA/IEC 62443, NIST, ISO 27000 family).
• Proven leadership in managing cybersecurity compliance programs within complex enterprise and industrial environments.
• Ability to work independently and collaboratively in a multicultural, cross-disciplinary setting.
• Strategic thinker with strong analytical, organizational, and mentorship capabilities.

Why join?

This is a unique opportunity to contribute to a forward-thinking cybersecurity strategy and play a pivotal role in protecting vital infrastructure. The role offers a challenging environment, cross-functional collaboration, and a chance to shape a secure digital future with a leading industry client.