Cybersecurity Consultant (GRC & Cloud Security), Remote Egypt with KSA travel

Why this role exists Our client runs a public cloud platform and delivers cloud projects for clients across KSA, the UAE and Pakistan, and it is growing into the government and financial-services markets. Those customers expect proven, audited security. We’re hiring one consultant to be iVolve’s dedicated security partner: you’ll build its security and compliance foundations and support its clients in Saudi Arabia. About the role In 12 months, success looks like this: Its security monitoring runs as a real service with clear incident response, not just a tool. The KSA client’s ISO 27001 recertification is complete against a NIST-aligned control set. This is a broad role. You’ll move between GRC, architecture review and hands-on technical work in the same week. What you’ll do Lead ISO 27001 readiness and recertification work: gap assessments, risk assessments, policies, SoA, internal audit and evidence for external auditors. Map controls across ISO 27001/27017/27018, NIST CSF and Saudi frameworks (NCA ECC/CCC). Review cloud and network security architecture: control-plane hardening, IAM/PAM, MFA, segmentation, backup and DR. Mature security monitoring on Wazuh: log-source coverage, detection use cases, alert triage and incident response runbooks. Track vulnerabilities and remediation, including findings from penetration tests. Deliver onsite engagements in KSA (typically 5-day visits) and present findings to technical and management stakeholders. Turn findings into prioritized roadmaps with clear business justification. What we’re looking for Required 5+ years in information security, with at least 2 years on ISO 27001 implementation, audit or recertification Hands-on experience with a SIEM (Wazuh, Splunk, QRadar, Sentinel or similar) Experience securing cloud or virtualized infrastructure (OpenStack/Red Hat, VMware, AWS/Azure/GCP) Working knowledge of network security: firewalls, VPN, segmentation, routing basics Fluent written and spoken English and Arabic; able to write client-ready reports Able to travel to KSA for short onsite assignments Preferred ISO 27001 Lead Implementer or Lead Auditor, CISSP, CCSP, CISM or CISA CCNP Security / CCIE, or an equivalent network certification Experience with Saudi NCA ECC/CCC or other GCC regulatory frameworks Experience at a cloud service provider, MSSP or telco PMP or experience running consulting engagements Show more Show less