Consultant Senior Manager Cyber Operate Cybersecurity Compliance Specialist

About Deloitte

Deloitte is one of the largest professional services firms globally, recognized for its impact and commitment to clients, people, and society. The firm has received awards such as Best Employer in the Middle East and Best Consulting Firm. Deloitte focuses on delivering innovative insights, solving complex challenges, and fostering sustainable growth, guided by shared values that aim to create a positive and enduring impact.

The Role: Consultant Senior Manager, Cyber Operate Cybersecurity Compliance Specialist

This full-time position is for a Consultant Senior Manager specializing in Cyber Operate Cybersecurity Compliance, based in Riyadh, Saudi Arabia. The role involves assessing and ensuring compliance with various cybersecurity frameworks and regulations, testing control effectiveness, and preparing for regulatory and audit reviews. Candidates should possess 2-5 years of relevant experience.

Key Responsibilities

• Conduct compliance assessments against NCA ECC-2:2024 and other applicable NCA controls (CSCC, CCC, DCC, OTCC, TCC, OSMACC).
• Assess compliance with ISO/IEC 27001:2022, PDPL data protection requirements, and other organizational obligations.
• Evaluate new systems, projects, and major changes for compliance prior to go-live.
• Interview control owners, review policies and procedures, and determine control implementation status.
• Test control effectiveness through evidence sampling and technical checks, including user access reviews, privileged account listings, firewall rules, logging and monitoring configuration, backup and restore records, patch status, and hardening baselines.
• Validate technical configurations against required baselines, utilizing automated compliance scans where available.
• Prepare NCA compliance self-assessments, evidence packs, and submissions, and support NCA assessments and other regulatory reviews.
• Support ISO/IEC 27001 certification and surveillance audits, as well as internal audit reviews.
• Coordinate responses to auditor requests and track audit findings to closure.
• Maintain the compliance obligations register and control-to-evidence mapping across NCA, ISO, and NIST frameworks.
• Agree on remediation plans with control owners, track their completion, and verify fixes.
• Report compliance status, trends, and overdue actions to management and governance committees.
• Monitor new and updated regulations (NCA, SDAIA/PDPL, NDMO) and assess their impact on the organization.

Required Experience and Capabilities

• 2-5 years of experience in cybersecurity compliance or a related field.
• Ability to build an understanding of the firm's purpose and values, and identify opportunities for impact.
• Demonstrated commitment to personal learning and development.
• Accountability for performance and meeting expectations.
• Developed effective communication and relationship-building skills.
• Understanding of how individual contributions align with team and business priorities.

Work Environment

This is a full-time position located in Riyadh, Saudi Arabia, within a professional services environment. The role requires collaboration and adherence to a culture that values inclusion and professional growth.