Senior Cybersecurity Assurance Consultant

About the role

The Senior Cybersecurity Assurance Consultant leads the design, delivery and continuous improvement of assurance services that evaluate cybersecurity, information security and compliance across the organization. Reporting to the department head, the role translates strategic objectives into operational programs, manages multidisciplinary teams and ensures alignment with national and international standards.

Key responsibilities

• Plan, direct, monitor and improve the assurance service portfolio.
• Convert strategic direction into actionable projects and programs.
• Identify and resolve operational challenges to enhance service delivery.
• Assess and increase the efficiency and effectiveness of department processes.
• Lead and resource‑manage assurance teams, ensuring optimal allocation.
• Coordinate cross‑departmental initiatives and project execution.
• Define department objectives and key results, reporting progress to senior management.
• Oversee development of deliverables related to NISCF accreditation.
• Assign tasks within the NISCF team and support efficient service operations.
• Engage internal and external stakeholders, providing expert feedback and fostering adoption of assurance services.
• Mentor and develop certification and accreditation specialists.

Required profile

• Master’s degree in IT, Cybersecurity, Risk Management or a related field, or at least 18 years of relevant experience.
• Minimum 5 years of audit and assurance experience, including 4 years in a specialized assessment or auditing role.
• Proven hands‑on experience in cybersecurity, information security, IT audit and assurance.
• Strong leadership, mentoring and team‑management capabilities.
• Excellent written and verbal communication in English.

Required skills

• Risk management and compliance assessment.
• International standards: ISO 27001, COBIT, NIA, Common Criteria.
• Accreditation and certification standards: ISO 17021, ISO 17024, ISO 17025, ISO 17065, ISO 27006.
• Governance, regulatory compliance and management‑system development.
• Project management and team leadership.
• IT audit and security assessment techniques.