Location
Riyadh
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
About the Role
As a Consultant - Manager, you will demonstrate and develop your capabilities in various areas of cybersecurity. You will be responsible for assessing the current cybersecurity posture and maturity against standards such as NCA ECC-2:2024, NIST CSF 2.0, and ISO/IEC 27001:2022. Your role will include defining the target state and authoring the cybersecurity strategy, along with benchmarking against peer organizations and leading practices.
Responsibilities
-
Assess and Set Direction
- Assess current cybersecurity posture and maturity against NCA ECC-2:2024, NIST CSF 2.0 and ISO/IEC 27001:2022, and produce the current-state and maturity assessment report.
- Define the target state, vision and guiding principles, turning ambiguity into clear options and a recommended path, and author the cybersecurity strategy.
- Benchmark against peer organizations of similar scale, regulated KSA entities and global leading practice.
-
Design the Operating Model
- Design and document the target operating model: structure, roles, RACI, capability map, and the split between in-house, managed-service and outsourced work.
- Define the interfaces between cybersecurity, IT, OT, risk, legal, procurement and the business.
-
Build the Roadmap and Business Case
- Build the 3–5 years roadmap of costed initiatives, prioritized by risk reduction, regulatory need and cost, ensuring realism in what the organization can deliver.
- Prepare business cases, the investment profile and the annual budget input, clearly linking security spend to business value and risk reduction.
- Track roadmap delivery and benefits; re-prioritize as development plans change.
-
Advise and Report
- Advise the CISO, steering committee and executives with confidence, handle challenges and push-back, and run strategy workshops.
- Define strategic KPIs and KRIs with the Performance Management team.
- Produce quarterly strategy and roadmap progress reports and board-level papers.
Leadership Capabilities
- Builds an understanding of the firm's purpose and values; explores opportunities for impact.
- Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent.
- Understands expectations and demonstrates accountability for keeping performance on track.
- Actively focuses on developing effective communication and relationship-building skills.
- Understands how daily work contributes to the priorities of the team and the business.
Qualifications
- Years of experience: 2-10 years total years.
- Bachelor's in cybersecurity, computer science, engineering or a related field. A Master's degree or MBA is preferred.
- Has personally delivered (not just supported) at least one cybersecurity strategy, operating model, or transformation roadmap for a large or regulated organization (Senior and Mid).
- Working knowledge of NCA ECC, NIST CSF 2.0 and ISO/IEC 27001.
- Strong written English and executive presentation skills.
- Experience in KSA or GCC government, large-scale development or critical-infrastructure.
- Consulting background (Big 4 or strategy firm) is preferred.
- Arabic language proficiency is preferred.
- At least one preferred certification: CISSP, CISM, CGEIT, CRISC. Also valued: ISO 27001 Lead Implementer/Auditor, PMP/PgMP.
