Job Title: Cyber Security Expert

Engagement Type: Consultant – Project Management & Consulting (PMC) and Technical Support

Project Phase: Phase 3 – Implementation, PMC, and Technical Support

Reporting To: Project Director / Client Representative

Job Summary

The Cyber Security Expert will provide specialized consulting, technical oversight, and project management support during Phase 3 of the project. The role is responsible for ensuring that all systems, networks, cloud platforms, and applications are implemented, integrated, and operated in compliance with security standards, regulatory requirements, and best practices.

The consultant will work closely with system integrators, IT teams, cloud engineers, and stakeholders to ensure that the project is secure, resilient, and compliant through to the issuance of the Final Acceptance Certificate (FAC).

Key Responsibilities

Project Management & Oversight

• Monitor and oversee the implementation of cybersecurity measures to ensure adherence to approved project plans, timelines, and security standards.
• Support the client in tracking security-related risks, vulnerabilities, and mitigation measures throughout the implementation phase.
• Ensure compliance with contractual, regulatory, and governance requirements.

Security Architecture & Implementation

• Provide expert guidance on cybersecurity architecture, network security, cloud security, and system hardening.
• Review and validate security designs, policies, and controls for all project systems.
• Ensure the deployment of secure configurations, encryption mechanisms, firewalls, intrusion detection/prevention systems, and endpoint security solutions.

Risk Assessment & Compliance

• Conduct cybersecurity risk assessments and vulnerability analyses.
• Support the definition and implementation of mitigation strategies and controls.
• Ensure adherence to cybersecurity frameworks (e.g., ISO 27001, NIST, CIS Controls) and regulatory requirements.

Incident Management & Technical Support

• Provide guidance on incident response procedures and support resolution of security incidents.
• Identify, analyze, and resolve security-related operational or technical issues during implementation.
• Support monitoring, logging, and reporting processes to detect and respond to threats in real-time.

Stakeholder Coordination

• Facilitate coordination between system integrators, IT/security teams, cloud providers, and business stakeholders.
• Participate in security reviews, technical workshops, and project meetings.
• Act as a trusted advisor to the client on cybersecurity matters.

Testing, Validation & Handover

• Support security testing, penetration testing, and validation of all systems.
• Ensure that vulnerabilities are remediated, and compliance with security policies is verified.
• Assist in preparing documentation, operational procedures, and security controls for project handover.
• Provide guidance until successful project completion and issuance of the Completion Certificate / Final Acceptance Certificate (FAC).

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Relevant certifications such as CISSP, CISM, CISA, CEH, or equivalent are highly desirable.

Experience Requirements

• Minimum 10–15 years of experience in cybersecurity, IT risk management, or information security roles.
• Proven experience securing enterprise systems, networks, and cloud environments.
• Experience working in PMC or consulting roles during implementation phases.
• Demonstrated experience supporting projects through go-live and Final Acceptance Certificate (FAC) stages.

Key Skills & Competencies

• Strong expertise in network security, cloud security, application security, and endpoint protection.
• In-depth knowledge of cybersecurity frameworks, standards, and regulatory compliance requirements.
• Ability to assess risks, design security controls, and enforce policies across multi-disciplinary teams.
• Excellent problem-solving, analytical, and incident response skills.
• Strong stakeholder management, communication, and documentation abilities.

Deliverables

• Regular progress reports on cybersecurity implementation, risks, and mitigation measures.
• Technical reviews and recommendations for security architecture and compliance.
• Validation of systems against security standards and best practices.
• Support through project completion and issuance of the Final Acceptance Certificate (FAC).