Senior Cybersecurity Consultant – Risk & Compliance

About the role

We are seeking a Senior Cybersecurity Consultant to join a leading professional services firm in Kuwait. The role focuses on delivering advisory, audit, risk, and compliance services to clients in regulated sectors, helping them achieve security and resilience objectives.

Key responsibilities

• Perform IT General Controls (ITGC) and IT Application Controls (ITAC) testing.
• Execute IT and cybersecurity audits across databases, servers, endpoints, networks, applications, SWIFT and other technology environments.
• Conduct cybersecurity risk assessments, gap analyses, and control reviews.
• Support ISO 27001 and ISO 22301 certification readiness engagements.
• Assist with CBK CSF / CORK assessments, remediation roadmaps, and gap analysis.
• Carry out vulnerability assessments, configuration reviews and security baseline assessments.
• Participate in business continuity, cyber‑resilience, third‑party risk and privacy engagements.
• Develop cybersecurity policies, procedures, frameworks and client reports.
• Contribute to technical and commercial proposals and RFP responses.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology or a related field.
• Relevant experience in cybersecurity consulting, advisory, IT audit or GRC.
• Strong knowledge of ISO 27001, ISO 22301, NIST CSF and CIS Controls.
• Experience with banking or other regulated‑sector clients is highly preferred.
• Professional certifications such as CISA, CISM, CRISC, CISSP, CEH or equivalent are an advantage.
• Excellent communication skills in English and Arabic.

Required skills

• IT General Controls (ITGC) and IT Application Controls (ITAC).
• ISO 27001 and ISO 22301 frameworks.
• NIST Cybersecurity Framework (CSF).
• CIS Controls.
• Vulnerability assessment and configuration review techniques.
• SWIFT security environment.