Senior Cybersecurity Accreditation Auditor

The Senior Cybersecurity Accreditation Auditor is responsible for delivering day‑to‑day accreditation services and ensuring that assessments of third parties are conducted in a fair, consistent, and objective manner. The role focuses on evaluating compliance with national and international cybersecurity standards, managing accreditation applications, and maintaining the integrity of the accreditation process. It also supports continuous improvement of accreditation frameworks, tools, and methodologies aligned with national cybersecurity requirements.

• Conduct day‑to‑day accreditation services.
• Maintain detailed and organized records of the accreditation process, ensuring accuracy and completeness.
• Ensure the highest standards of competence and impartiality are maintained, and consistency is achieved across accreditation activities.
• Undertake compliance activities against security standards.
• Operate national accreditation scheme applications.
• Document observations and findings clearly, traceable, and based on objective evidence.
• Develop and maintain accreditation procedures and tools based on the National Information Security Compliance framework.
• Maintain impartiality, confidentiality, and declare any potential conflicts of interest that might jeopardize an objective assessment, as required.
• Perform periodic surveillance accreditation assessment on third parties to monitor and review compliance.
• Develop measurement and compliance mechanisms and tools to monitor improvements.
• Possess knowledge of international standards, regulations, and best practices (ISO 27001, OWASP, PTES, SOC CMM, etc.) and implementation experience against at least one.
• Possess knowledge of local laws and regulations in different sectors:
  Cybercrime, PDPPL, eCommerce, etc.
• Possess knowledge of national cyber security standards and frameworks (NIA, CSF, etc.).
• Stay up to date with the latest developments in security, emerging threats, and evolving technology to keep the accreditation process relevant.
• Manage external communication during the assessment: from application to issuance of decision.
• Act as escalation point of contact for accreditation issues and requests.
• Team player who collaborates with the team to maintain and improve the accreditation program.

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or equivalent.
• Minimum 12 years of experience in Information Security, Cybersecurity, Risk Assessment, or Assurance.
• Hands‑on experience in information security auditing, accreditation, or cybersecurity management.
• Experience in cybersecurity consulting or implementation aligned with national/international standards is an advantage.

• NIA Certified Auditor, CISSP, CISA, CISM, ISO 27001 Lead Auditor or equivalent.

• Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, NIA, OWASP, PTES, SOC‑CMM, etc.).
• Understanding of accreditation standards (ISO/IEC 17011, ISO/IEC 17025) and certification processes.
• Experience in risk assessment and audit methodologies.
• Knowledge of national cybersecurity laws and regulations (Cybercrime laws, data protection, eCommerce regulations).
• Strong awareness of third‑party audit and certification practices.
• Ability to assess security controls and compliance against formal schemes objectively.

• Strong analytical thinking and problem‑solving abilities.
• Excellent technical report writing and documentation skills.
• Ability to communicate clearly with technical and senior executive stakeholders.
• Experience in delivering workshops, training, or knowledge‑sharing sessions.
• Strong attention to detail and ability to work under pressure and tight deadlines.

• Strong teamwork and collaboration skills.
• High level of integrity, impartiality, and professionalism.
• Ability to manage multiple stakeholders and competing priorities.
• Strong interpersonal and communication skills.
• Proactive, self‑driven, and able to work independently with minimal supervision.

English (required)

As soon as possible

12 months, with possibility of extension based on departmental requirements.