Cybersecurity Expert

gu-recruitment; Muscat; On-site; OMR 120,000 - 180,000; Full time

Job summary

gu-recruitment is seeking a Cybersecurity Expert to safeguard the organization's information systems, networks, and data. You will design, implement, and monitor security measures to protect operations and enable strategic goals.

You will lead governance, risk assessments, incident response, IAM, and cloud security across AWS/Azure/GCP, while mentoring teams and staying ahead of evolving threats. Join a forward‑looking team that emphasizes security maturity, cross‑functional collaboration, and

Qualifications

• Master’s degree required in CS or information security.
• Professional security certifications (CISSP, CISM, CEH, CySA+, GIAC).
• 15+ years of proven cybersecurity experience.
• Strong knowledge of networks, firewalls, IDS/IPS, SIEM, vulnerability management, and incident response.
• Experience with cloud security controls (AWS, Azure, GCP).

Responsibilities

• Develop and implement security strategy and governance aligned to ISO/NIST.
• Design secure network architectures and deploy firewall/IDS/IPS.
• Monitor for vulnerabilities and coordinate remediation.
• Lead incident response and post-incident reviews.
• Manage IAM and Zero Trust principles.
• Conduct cybersecurity awareness and training.
• Research emerging threats and evaluate new security tools.

Skills

Security governance

Risk assessment

Cloud security

Incident response

Zero Trust

Education

Master’s degree in Computer Science, Information Security, or related field

CISSP

CISM

CEH

CompTIA CySA+

GIAC

Job description

The Cybersecurity Expert is responsible for safeguarding the organization’s information systems, networks, and data against cyber threats. This role involves designing, implementing, and monitoring security measures, ensuring compliance with industry standards and regulations, and responding effectively to incidents. The Cybersecurity Expert should enhance and build a secure digital environment that supports the organization’s operations and strategic goals.

Key Responsibilities:

• Security Strategy & Governance:
  • Implement, and maintain cybersecurity policies, procedures, and standards in compliance with local standards.
  • Conduct risk assessments and develop mitigation strategies.
  • Ensure compliance with international security frameworks (ISO 27001, NIST, CIS, etc.) and local regulatory requirements.
  • Provide Infrastructure security assessment Strategy.
  • Response to Internal and External Auditors.
• Infrastructure & Network Security:
  • Design and implement secure network architectures, firewalls, VPNs, IDS/IPS, and endpoint protection.
  • Monitor systems for vulnerabilities, anomalies, and unauthorized access
  • Follow up with concerned teams for vulnerabilities and misconfiguration mitigation.
  • Coordinate patch management and system hardening activities.
• Threat Management & Incident Response:
  • Monitor, analyze, and respond to security events from SIEM, SOC, and threat intelligence sources.
  • Should Lead incident response activities.
  • Conduct post-incident reviews and develop preventive measures.
• Identity & Access Management (IAM):
  • Manage authentication, authorization, and access controls.
  • Implement Zero Trust and least-privilege principles.
• Security Awareness & Training:
  • Conduct cybersecurity awareness programs for employees.
  • Provide technical guidance to IT teams.
• Emerging Technologies & Research:
  • Stay updated on evolving cyber threats, attack vectors, and security tools.
  • Recommend and evaluate new security technologies and solutions (e.g., AI-driven security, cloud security).
• Knowledge Transfer
  • Technical expertise with the critical function of mentoring, training, and developing internal capabilities.

Requirements Qualifications & Skills:

• Master’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as CISSP, CISM, CEH, CompTIA CySA+, or GIAC.
• Proven experience in cybersecurity roles (minimum 15+ years).
• Strong knowledge of network protocols, firewalls, IDS/IPS, SIEM, vulnerability management, and incident response.
• Experience with cloud platforms (AWS, Azure, GCP) security controls.
• Analytical, problem-solving, and communication skills.
• Ability to work under pressure and respond quickly to security incidents.

Preferred Attributes

• Experience in Security Operations Centers (SOC).
• Knowledge of regulatory frameworks (ISO 27001).
• Hands‑on experience with penetration testing and ethical hacking.
• Strong collaboration skills to work with cross‑functional teams.