Job Title Cybersecurity Senior Consultant – Subcontractor (Saudi Arabia) Location Saudi Arabia (Onsite / Hybrid – project dependent) Engagement Type Subcontract / Contract Experience Level Senior Consultant (6–10+ years) Role Overview The Cybersecurity Senior Consultant will support and lead cybersecurity initiatives for government or large enterprise clients in Saudi Arabia. The role focuses on designing, implementing, and assessing security controls aligned with local regulations (e.g., NCA, SAMA, CITC) and international standards. The consultant will work closely with client stakeholders, program leadership, and technical teams to strengthen cybersecurity posture across people, process, and technology. Key Responsibilities Cybersecurity Advisory & Delivery Lead and deliver cybersecurity assessments, gap analyses, and maturity evaluations Design and implement cybersecurity frameworks, policies, and operating models Support enterprise security programs across governance, risk, and compliance (GRC) Translate business and regulatory requirements into actionable security controls Regulatory & Compliance Ensure alignment with Saudi cybersecurity regulations and standards, including:National Cybersecurity Authority (NCA) SAMA Cybersecurity Framework (for financial sector) CITC / CST requirements ISO 27001 / NIST / COBIT (as applicable) Support regulatory readiness, audits, and remediation programs Risk & Security Management Perform cyber risk assessments and threat modeling Support incident response planning, tabletop exercises, and post-incident reviews Contribute to SOC, IAM, cloud security, data protection, or OT security initiatives (depending on project scope) Stakeholder & Team Engagement Act as a trusted advisor to client leadership and senior stakeholders Coordinate with cross-functional teams (IT, legal, risk, operations) Mentor junior consultants and support knowledge transfer Required Qualifications Experience & Skills6–10+ years of experience in cybersecurity consulting or enterprise security roles Strong understanding of Saudi cybersecurity regulations and compliance requirements Proven experience delivering cybersecurity projects in large, complex environments Solid knowledge of security domains such as:Cyber GRCRisk management Security architecture Cloud and infrastructure security Identity & access management Certifications (Preferred) CISSP, CISM, CISA, CRISCISO 27001 Lead Implementer / Auditor Cloud security certifications (AWS, Azure, GCP) are a plus Language & Communication Strong English communication skills (written and verbal) Arabic is highly preferred for client-facing roles Additional Requirements Availability to work onsite in Saudi Arabia (Riyadh, Jeddah, NEOM, or client site) Experience working with government or regulated industries is highly desirable Ability to work under subcontracting arrangements and meet project timelines What We’re Looking For Strong consulting mindset with hands-on delivery capability Ability to navigate complex stakeholder environments Cultural awareness and experience working in the Middle East is a plus Results-driven, adaptable, and comfortable in fast-paced programs