Cyber Security Consultant – Kuwait

About the role

We are looking for experienced Cybersecurity Consultants / Senior Consultants to join our team in Kuwait. The role involves working on cybersecurity risk, compliance, assessment, and audit engagements across critical infrastructure sectors such as banking, telecom, and government.

Key responsibilities

• Support the development and implementation of cybersecurity risk management frameworks aligned with ISO 27001, NIST CSF and local regulations.
• Conduct cybersecurity audits, control assessments, and maturity assessments for infrastructure, applications, cloud environments and third‑party providers.
• Perform or review vulnerability assessments, penetration testing and secure configuration reviews across operating systems, databases, networks and cloud platforms.
• Assist clients with cyber resilience initiatives, including business continuity planning, disaster‑recovery testing and governance.
• Manage workstreams and deliverables across multiple engagements while maintaining quality and timelines.
• Contribute to proposals, tenders and RFP responses to grow the cybersecurity practice.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, IT, Computer Science or a related field.
• 3–6 years of experience in cybersecurity consulting, risk, compliance, assessment or audit.
• Strong understanding of frameworks and standards such as ISO 27001, NIST CSF and related security controls.
• Exposure to risk assessments, GRC, security audits, VA/PT, TPRA, cloud security, BCP and DR is preferred.
• Knowledge of Kuwait NCSA and/or CBK cybersecurity guidelines is an advantage.
• Excellent analytical, report‑writing and client‑facing communication skills.

Required skills

• ISO 27001 framework implementation
• NIST Cybersecurity Framework (CSF)
• Vulnerability Assessment (VA) and Penetration Testing (PT)
• Secure configuration review for OS, databases, networks and cloud
• Cloud security assessment
• Business Continuity Planning (BCP) and Disaster Recovery (DR) testing
• Third‑Party Risk Assessment (TPRA)