Cybersecurity Compliance & Technical Controls Consultant - 2-Year Engagement

MENA Consultant; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

MENA Consultant is hiring a Cybersecurity Compliance & Technical Controls Consultant to assess regulatory alignment and MBSS baselines across infrastructure, cloud, apps and critical assets. The role involves technical reviews, evidence management and remediation tracking, with a focus on dashboards and metrics for stakeholders.

The consultant will review vulnerability results, SSDLC requirements, backup and disaster recovery controls, and ensure effective control implementations in line with

Qualifications

• Experience performing technical cybersecurity compliance assessments against regulatory requirements, security frameworks and MBSS.
• Ability to assess implementation and effectiveness of security controls, document gaps, and recommend remediation.
• Experience reviewing secure configuration baselines and golden images for servers and endpoints; hardening standards for databases/OS/network devices.

Responsibilities

• Assess and validate the implementation and effectiveness of cybersecurity controls against regulatory requirements and MBSS.
• Conduct technical and regulatory compliance assessments for critical assets; manage evidence and remediation tracking.
• Review security controls and recommend remediation or improvement actions as needed.
• Manage evidence collection, documentation and repositories for audits and regulatory submissions.
• Support audits including evidence management, findings remediation and corrective action tracking.
• Develop and monitor cybersecurity policies, standards, procedures, dashboards, KPIs and KRIs.
• Monitor regulatory MBSS updates and ensure timely assessment and implementation.

Skills

Security compliance assessments

Security controls effectiveness

Secure baselines

Firewall rules

Cloud services

SIEM

Application security

SSDLC

Vulnerability assessment

Penetration testing

Disaster recovery

Business continuity

Backup

Audit support

Remediation tracking

Compliance evidence

Job description

Location: remote.
Years of Experience: 8-10 years.
Project Duration: 2 years.
Language Requirements: Fluency in Arabic & English (written and spoken).

We are seeking a Cybersecurity Compliance & Technical Controls Consultant to assess whether cybersecurity controls are implemented effectively and meet applicable regulatory requirements, security frameworks, Minimum Baseline Security Standards (MBSS), and approved configuration baselines. The consultant will conduct technical compliance reviews across infrastructure, cloud, applications, and critical assets; manage audit evidence and remediation tracking; and develop policies, reports, and metrics that support ongoing compliance.

Key Requirements

• Experience conducting technical cybersecurity compliance assessments against regulatory requirements, security frameworks, and MBSS.
• Ability to assess the implementation and effectiveness of security controls, document gaps, and recommend remediation.
• Experience reviewing secure configuration baselines and golden images for servers and endpoints, as well as hardening standards for databases, operating systems, and network devices.
• Experience assessing firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM.
• Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements.
• Ability to review vulnerability assessment and penetration testing results and track related compliance gaps through remediation.
• Experience evaluating backup, disaster recovery, and business continuity controls against applicable requirements.
• Experience managing compliance evidence, audit support, findings, and corrective action tracking.
• Ability to develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs.

Key Responsibilites

• Assess and validate the implementation and eUectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints.
• Conduct periodic and ad-hoc technical and regulatory compliance assessments for critical assets to ensure adherence to security, regulatory, and organizational requirements.
• Review and assess security controls and recommend remediation or improvement actions where necessary.
• Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions.
• Support internal and external audits, including evidence management, findings remediation, and corrective action tracking.
• Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed.
• Assist in the development and monitoring of compliance-related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
• Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders.
• Develop, maintain, and review cybersecurity policies, standards, procedures, and controls to support compliance with MBSS and applicable regulatory requirements.
• Monitor regulatory and MBSS requirement updates and ensure timely assessment and implementation of new compliance obligations.
• Communicate technical and regulatory requirements eUectively to both technical and non-technical stakeholders.
• Conduct technical compliance assessments of firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM implementations.
• Verify compliance with secure configuration baselines and system hardening standards for servers, databases, operating systems, and network devices.
• Evaluate backup, disaster recovery, and business continuity controls to ensure compliance with regulatory, organizational, and MBSS requirements.
• Review application security controls and ensure adherence to Secure Software Development Lifecycle (SSDLC) requirements.
• Analyze vulnerability assessment and penetration testing results to identify compliance gaps and track remediation activities.

If you would like to know more about theGlobal Consulting BootcampVisit:https://caseinpointco.com/global-consultant-bootcamp/
If you would like to know more about theMC ClubVisit:https://menaconsultant.com/mc-club/