Cybersecurity Consultant

About the role

The Cybersecurity Consultant will lead and manage the organisation's cybersecurity programme, ensuring robust governance, controls, risk management and incident response capabilities. Reporting to the Head of IT, the role serves as the day‑to‑day security focal point, providing specialist advice and promoting a strong security culture.

Key responsibilities

• Design, implement and continuously improve the cybersecurity programme, policies, standards and procedures.
• Develop and execute a cybersecurity roadmap aligned with business priorities, risk appetite and regulatory obligations.
• Maintain compliance documentation for UAE PDPL and Dubai Electronic Security Center requirements.
• Conduct risk assessments, vulnerability scans and security reviews across infrastructure, applications, cloud and third‑party services.
• Monitor security alerts, logs and threat intelligence to detect and respond to incidents.
• Coordinate incident response activities from detection through post‑incident review.
• Review and harden security configurations across network, endpoint, infrastructure and application environments.

Required profile

• Proven experience in managing enterprise‑wide cybersecurity programmes.
• Strong understanding of UAE data protection and electronic security regulations.
• Ability to translate risk findings into actionable remediation plans.
• Excellent communication skills to advise technical and non‑technical stakeholders.

Required skills

• ISO/IEC 27001 framework
• NIST Cybersecurity Framework (CSF)
• Vulnerability assessment and security scanning
• Cloud, network, endpoint and application security
• Incident response and root‑cause analysis
• Risk assessment and risk treatment planning