Enterprise Cybersecurity Consultant

ROLES AND RESPONSIBILITIES

• Cybersecurity Compliance
• Conduct gap assessments against national cybersecurity regulations (e.g. NCA ECC, CCC, DCC) and international standards (ISO 27001, NIST, etc.).
• Support internal and third-party cybersecurity audits by collecting evidence and tracking remediation actions.
• Work with internal stakeholders to ensure timely resolution of compliance issues.
• Maintain awareness of changes in regulatory and compliance requirements and contribute to updating internal controls accordingly.

ROLES AND RESPONSIBILITIES

• Cyber Risk Management
• Lead risk assessments on major changes, business initiatives, or technology deployments.
• Identify control gaps and evaluate their potential impact on business operations and data confidentiality, integrity, and availability.
• Propose risk treatment plans and monitor the execution of mitigation activities in coordination with IT and business units.
• Maintain a comprehensive cybersecurity risk register to document identified risks, risk analysis results, mitigation plans, and status updates. Regularly report on key cybersecurity risks, risk trends, and mitigation progress to the Enterprise GRCC Director and senior management, ensuring informed decision-making.
• Conduct Third-party risk assessments on all contractors, vendor, and partners working with Haboob internally or externally.
• Keep a current understanding of Haboob context and industry trends and best practices in cyber risk management (e.g. new risk assessment methodologies, threat intelligence insights) and incorporate relevant improvements into Haboob’s risk management processes.

ROLES AND RESPONSIBILITIES

• Security Operations Oversight
• Review security monitoring reports, event logs, and alerts from the SOC and ensure appropriate triage and escalation of incidents.
• Oversee vulnerability assessment and penetration testing (VAPT) engagements by reviewing scope, evaluating reports, and coordinating remediation with IT.
• Assist in investigation of cybersecurity incidents, ensuring lessons learned are documented and controls are enhanced.
• Conduct reviews or audits of security tool configurations and deployments (e.g. DLP, EDR) for compliance with policies.
• Provide advisory to business units and IT on embedding security in projects and change requests.

ROLES AND RESPONSIBILITIES

• Stakeholder Engagement and Advisory
• Act as the Cybersecurity point of contact and checker on all technology and data related projects and changes within Haboob environment.
• Act as a point of contact for cybersecurity-related queries from internal departments.
• Collaborate with Data Management, IT Infrastructure and security, and other teams to align cybersecurity controls and objectives.
• Deliver awareness sessions and technical guidance to raise the cybersecurity maturity of other teams.
• Conduct Tabletop Exercises and workshops with Haboob Stakeholders.

Knowledge and Experience

Education and Certifications