Cybersecurity Consultant (GRC & Cloud Security), Remote Egypt with KSA travel

Why this role exists

Our client runs a public cloud platform and delivers cloud projects for clients across KSA, the UAE and Pakistan, and it is growing into the government and financial-services markets. Those customers expect proven, audited security. We’re hiring one consultant to be iVolve’s dedicated security partner: you’ll build its security and compliance foundations and support its clients in Saudi Arabia.

About the role

In 12 months, success looks like this:

• Its security monitoring runs as a real service with clear incident response, not just a tool.
• The KSA client’s ISO 27001 recertification is complete against a NIST-aligned control set.

This is a broad role. You’ll move between GRC, architecture review and hands-on technical work in the same week.

What you’ll do

• Lead ISO 27001 readiness and recertification work: gap assessments, risk assessments, policies, SoA, internal audit and evidence for external auditors.
• Map controls across ISO 27001/27017/27018, NIST CSF and Saudi frameworks (NCA ECC/CCC).
• Review cloud and network security architecture: control-plane hardening, IAM/PAM, MFA, segmentation, backup and DR.
• Mature security monitoring on Wazuh: log-source coverage, detection use cases, alert triage and incident response runbooks.
• Track vulnerabilities and remediation, including findings from penetration tests.
• Deliver onsite engagements in KSA (typically 5-day visits) and present findings to technical and management stakeholders.
• Turn findings into prioritized roadmaps with clear business justification.

What we’re looking for

Required

• 5+ years in information security, with at least 2 years on ISO 27001 implementation, audit or recertification
• Hands-on experience with a SIEM (Wazuh, Splunk, QRadar, Sentinel or similar)
• Experience securing cloud or virtualized infrastructure (OpenStack/Red Hat, VMware, AWS/Azure/GCP)
• Working knowledge of network security: firewalls, VPN, segmentation, routing basics
• Fluent written and spoken English and Arabic; able to write client-ready reports
• Able to travel to KSA for short onsite assignments

Preferred

• ISO 27001 Lead Implementer or Lead Auditor, CISSP, CCSP, CISM or CISA
• CCNP Security / CCIE, or an equivalent network certification
• Experience with Saudi NCA ECC/CCC or other GCC regulatory frameworks
• Experience at a cloud service provider, MSSP or telco
• PMP or experience running consulting engagements