Consultant – Manager| Cyber Operate | Strategy & Architecture | KSA

Job Summary

This role involves assessing and defining cybersecurity strategies, operating models, and roadmaps for organizations, focusing on compliance with standards and delivering value through risk reduction and regulatory alignment.

Responsibilities

• Evaluate current cybersecurity posture and maturity based on NCA ECC-2:2024, NIST CSF 2.0, and ISO/IEC 27001:2022, and prepare assessment reports.
• Develop target state, vision, and guiding principles to create a clear cybersecurity strategy.
• Benchmark cybersecurity practices against similar organizations and global standards.
• Design and document the target operating model including structure, roles, RACI, capability map, and service delivery split.
• Define interfaces between cybersecurity and other departments such as IT, OT, risk, legal, procurement, and business units.
• Create a 3–5 year roadmap of prioritized, costed initiatives aligned with risk reduction and regulatory requirements.
• Prepare business cases, investment profiles, and annual budget inputs linking security spending to business value and risk mitigation.
• Advise executives and steering committees, conduct strategy workshops, and produce progress reports and board-level documentation.

Requirements

• 2-10 years of total experience.
• Bachelor’s degree in cybersecurity, computer science, engineering, or related field; Master’s or MBA preferred.
• Experience delivering at least one cybersecurity strategy, operating model, or transformation roadmap for a large or regulated organization.
• Working knowledge of NCA ECC, NIST CSF 2.0, and ISO/IEC 27001.
• Strong written English and executive presentation skills.
• Experience with KSA or GCC government, large-scale development, or critical infrastructure.
• Consulting background from Big 4 or strategy firms preferred.
• Arabic language skills preferred.
• At least one certification among CISSP, CISM, CGEIT, CRISC; ISO 27001 Lead Implementer/Auditor, PMP/PgMP also valued.

We refresh listings regularly, but some roles close early on the source platform.