Cybersecurity Assurance Consultant

The Senior Cybersecurity Assurance Consultant is responsible for leading, planning, and enhancing assurance services, ensuring effective delivery of cybersecurity, information security, and compliance assessment activities. The role translates strategic objectives into operational programs, manages assurance teams, and ensures continuous improvement of processes aligned with national and international standards. The position also plays a key role in stakeholder engagement, accreditation support (including NISCF), and coordination across departments to strengthen governance, risk, and compliance outcomes.

Key Responsibilities

• Planning, directing, monitoring, improvement and maintenance of assurance service.
• Translate the strategic direction from the department head into actionable projects and programs.
• Provide solutions for challenges encountered in the operation and promotion of assurance services.
• Continuously assess and improve the efficiency and effectiveness of the Department operations.
• Manage the teams within the department and ensure effective Resource Management.
• Coordinate with other departments on matters concerning the delivery of projects and operations.
• Develop and plan department objectives and key results.
• Follow-up with the top management on resources and requirements for the benefits of the department.
• Review development of deliverables related to NISCF.
• Manage the tasks and assignments among the NISCF team.
• Assist in setting up efficient and effective operation of NISCF assurance services.
• Interact with stakeholders, providing expert feedback on challenges and insights to the operation team.
• Interact with other departments in NCSA.
• Interact with external stakeholders for development and adoption of assurance services.
• Manage, mentor and lead the NISCF resources and certification/accreditation specialists, providing operational guidance, professional development, and capability enhancement.

Requirements

Education & Experience:

• Master’s degree in IT, Cybersecurity, Risk Management, or related field, or minimum 18 years of relevant experience.
• At least 5 years of experience in audit and assurance.
• Minimum 4 years of assessment or auditing experience in a specialized field.
• Proven hands-on experience in cybersecurity, information security, IT audit, and assurance.

Technical & Professional Skills:

• Strong knowledge of risk management and compliance assessment.
• Familiarity with international standards (ISO 27001, COBIT, NIA, Common Criteria, etc.).
• Knowledge of accreditation and certification standards (ISO 17021, 17024, 17025, 17065, 27006).
• Experience in governance, regulatory compliance, and management system development.
• Project management and team leadership experience.
• Professional certifications in auditing, compliance, or risk management (preferred).
• Experience engaging with senior executives and decision-makers.

Behavioral Competencies:

• Strong leadership, mentoring, and team management abilities.
• Excellent communication skills (oral and written) in English.
• Strong analytical, problem-solving, and critical thinking skills.
• Ability to manage multiple priorities under pressure and meet deadlines.
• Effective stakeholder management and conflict resolution skills.

Language: English (required)

Availability: As soon as possible

The contract duration is 12 months, with the possibility of extension based on departmental requirements.