Cyber Security Auditor – Part‑time (Immediate)

About the role

The firm is looking for a part‑time Cyber Security Auditor to independently assess a client’s compliance with the Central Bank of Kuwait’s Cyber and Operational Resilience Framework (CORF). The role involves identifying gaps, reviewing evidence, documenting findings and delivering practical recommendations to strengthen the control environment.

Key responsibilities

• Review the client’s Statement of Applicability and Inherent Risk Profile against CORF requirements.
• Assess governance and control frameworks across Cyber Resilience, Operational Resilience and Third‑Party Risk Management baselines.
• Test and validate implemented cybersecurity and operational resilience controls.
• Evaluate identified risks and maturity against CORF standards.
• Document audit procedures, evidence, testing results and conclusions in comprehensive working papers.
• Prepare the independent audit assessment report and related deliverables.
• Coordinate with client stakeholders to obtain documentation, evidence and walkthroughs.
• Conduct onsite audit activities at the client’s premises while maintaining confidentiality.

Required profile

• Bachelor’s or master’s degree in Cybersecurity, Information Security, IT, Computer Science, Risk Management, Audit or a related field.
• 5–10 years of experience in cybersecurity audit, technology risk, operational resilience or regulatory compliance, preferably within banks or regulated financial institutions.
• Professional certifications such as CISA, CISSP, CISM, CRISC, ISO/IEC 27001 Lead Auditor, ISO 22301 Lead Auditor, CIA, COBIT or ITIL are preferred.
• Experience interacting with senior management, audit committees and regulators.

Required skills

• Cybersecurity audit
• Operational resilience assessment
• Regulatory compliance evaluation (CORF)
• Risk assessment and mitigation
• Third‑party risk management