Senior Cyber Security Assessor (Information Security Certification)

Overview

We are searching for an experienced Senior Cyber Security Assessor to lead and oversee certification and compliance evaluations for information security. This position involves reviewing certification submissions, assessing organizational adherence to national and international cyber security standards, conducting risk assessments and audits, and maintaining impartiality and quality throughout certification processes.

Key Responsibilities

• Lead and execute certification assessments for organizations pursuing cyber security and information security certifications.
• Supervise assessment teams, delegate assignments, and manage daily certification workflow.
• Evaluate compliance of organizations against recognized cyber security standards and frameworks.
• Assess the design and effectiveness of cybersecurity controls and information security measures.
• Conduct comprehensive cyber security risk assessments, audits, and compliance reviews.
• Keep detailed, accurate records of all certification and assessment activities.
• Safeguard impartiality, confidentiality, and consistency throughout certification operations.
• Document findings clearly, based on objective evidence with traceability.
• Develop and update certification methodologies, procedures, and tools aligned with national compliance frameworks.
• Create mechanisms and monitoring tools to measure compliance and track progress.
• Provide assessment results and recommendations to key stakeholders and decision-makers.
• Handle all external communications during audits and certification from initiation to decision issuance.
• Stay informed about current cyber security threats, standards, technologies, and best practices.
• Conduct internal training and workshops to strengthen team skills in cyber security, compliance, and auditing.
• Collaborate effectively with clients, internal teams, and other stakeholders on multiple concurrent projects.

Qualifications and Experience

• Bachelor’s degree in IT, Cyber Security, Computer Information Systems, or related discipline.
• Preferred certifications include CISSP, CISA, CISM, CRISC, and ISO 27001 Lead Auditor/Implementer.
• Minimum of 7 years professional experience in information or cyber security.
• At least 4 years focused on security auditing, risk management, or security management.
• Consulting or implementation experience with cyber security programs aligned to national/international standards is advantageous.

Technical Skills and Knowledge

• Comprehensive knowledge of cyber security governance, risk assessment, and audit techniques.
• Familiarity with major frameworks and standards: ISO 27001, NIST, NIA Controls, CSF Q2022.
• Understanding of certification and audit standards such as ISO/IEC 17021, 17024, 27006, 17065, 19011, ITAF, ISA.
• Practical experience with information security auditing and management.
• Strong awareness of cyber security trends and emerging technologies.
• Excellent skills in technical report writing and documentation.

Soft Skills

• Strong analytical capabilities and problem-solving aptitude.
• Effective written and verbal communication, including managing diverse stakeholder relationships.
• Ability to work autonomously and handle multiple priorities efficiently.
• Meticulous attention to detail; capacity to work under pressure and meet tight deadlines.
• Excellent interpersonal and teamwork abilities.
• Experience in facilitating training sessions, workshops, and awareness programs.

Language Requirements

• Fluency in English is mandatory.
• Proficiency in Arabic is an added advantage.

Additional Information

The contract is for a 12-month term with potential for extension depending on departmental needs.