Senior Cloud Security Consultant

Job Overview

We are seeking experienced Senior Cloud Security Consultants to join the Sovereign Cloud Certification & Assurance Program for one of our prestigious clients in the UAE. The ideal candidates will have extensive experience in cloud security governance, risk and compliance with a strong background in consulting, implementation and certification support for cloud security and information security frameworks. Candidates should possess excellent communication and presentation skills and be capable of engaging with stakeholders at all levels to drive compliance and assurance initiatives.

• SOC 1
• SOC 2
• SOC 3
• ISO IEC 27017
• ISO IEC 27001
• ISO 22301
• CSA STAR Level 2

• Conduct current‑state assessment against the above standards
• Identify gaps, risks, and compliance deficiencies
• Develop prioritized remediation roadmap
• Perform information security and cloud security risk assessments
• Map controls across ISO
  27001, ISO
  27017, ISO
  22301, SOC2, SOC3, and CSASTAR requirements
• Review existing governance documents
• Develop and update Information Security Policy, Risk Management Policy, Access Control Policy, Asset Management Policy, Incident Management Procedure, Business Continuity and Disaster Recovery Procedures, Cloud Security Policies and Procedures, Supplier Security Requirements, Data Protection and Privacy Procedures, and other frameworks covering the above standards
• Provide guidance for implementing administrative, technical, and operational controls
• Assist control owners in defining evidence requirements
• Support security governance and operational process enhancement
• Conduct awareness sessions for management and staff
• Deliver role‑based training for control owners and stakeholders
• Provide guidance on compliance responsibilities
• Support audit preparation and evidence collection
• Assist during Stage1 and Stage2 certification and external regulatory audits

Experience as a Senior Cloud Security Consultant; demonstrated expertise in cloud security governance, risk, and compliance; strong background in consulting, implementation, and certification support for cloud security and information security frameworks; excellent communication and presentation skills; ability to engage stakeholders at all levels to drive compliance and assurance initiatives.