Location: remote. Years of Experience: 8-10 years. Project Duration: 2 years. Language Requirements: Fluency in Arabic & English (written and spoken). We are seeking a Cybersecurity Compliance & Technical Controls Consultant to assess whether cybersecurity controls are implemented effectively and meet applicable regulatory requirements, security frameworks, Minimum Baseline Security Standards (MBSS), and approved configuration baselines. The consultant will conduct technical compliance reviews across infrastructure, cloud, applications, and critical assets; manage audit evidence and remediation tracking; and develop policies, reports, and metrics that support ongoing compliance. Key Requirements • Experience conducting technical cybersecurity compliance assessments against regulatory requirements, security frameworks, and MBSS. • Ability to assess the implementation and effectiveness of security controls, document gaps, and recommend remediation. • Experience reviewing secure configuration baselines and golden images for servers and endpoints, as well as hardening standards for databases, operating systems, and network devices. • Experience assessing firewall rules, internet-facing systems, cloud services, and security monitoring controls, including SIEM. • Familiarity with application security and Secure Software Development Lifecycle (SSDLC) requirements. • Ability to review vulnerability assessment and penetration testing results and track related compliance gaps through remediation. • Experience evaluating backup, disaster recovery, and business continuity controls against applicable requirements. • Experience managing compliance evidence, audit support, findings, and corrective action tracking. • Ability develop or maintain cybersecurity policies, standards, procedures, dashboards, KPIs, and KRIs. Key Responsibilities • Assess and validate the implementation and effectiveness of cybersecurity controls against applicable regulatory requirements, security frameworks, and Minimum Baseline Security Standards (MBSS), and golden images for servers and endpoints. • Conduct periodic and ad‑hoc technical and regulatory compliance assessments for critical assets to ensure adherence to security, regulatory, and organizational requirements. • Review and assess security controls and recommend remediation or improvement actions where necessary. • Manage compliance evidence collection, documentation, and repositories to support audits, assessments, and regulatory submissions. • Support internal and external audits, including evidence management, findings remediation, and corrective action tracking. • Support cybersecurity risk assessments and ensure regulatory and compliance risks are identified, assessed, and appropriately managed. • Assist in the development and monitoring of compliance‑related Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs). • Develop technical compliance reports, dashboards, and metrics for management and regulatory stakeholders. • Develop, maintain, and review cybersecurity policies, standards, procedures, and controls to support compliance with MBSS and applicable regulatory requirements. • Monitor regulatory and MBSS requirement updates and ensure timely assessment and implementation of new compliance obligations. • Communicate technical and regulatory requirements effectively to both technical and non‑technical stakeholders. • Conduct technical compliance assessments of firewall rules, internet‑facing systems, cloud services, and security monitoring controls, including SIEM implementations. • Verify compliance with secure configuration baselines and system hardening standards for servers, databases, operating systems, and network devices. • Evaluate backup, disaster recovery, and business continuity controls to ensure compliance with regulatory, organizational, and MBSS requirements. • Review application security controls and ensure adherence to Secure Software Development Lifecycle (SSDLC) requirements. • Analyze vulnerability assessment and penetration testing results to identify compliance gaps and track remediation activities.