Cyber Security Senior Consultant – Strategy & Transformation

About the role

We are a team of cybersecurity practitioners helping organisations in industry and government design, govern and transform their security programmes. We are expanding our practice in Casablanca and Rabat and are looking for senior consultants with 3‑5 years of experience in cybersecurity strategy, GRC and security transformation.

Key responsibilities

• Develop cyber strategies based on client threat landscapes, assess maturity against frameworks (ISO 27001, NIST CSF, DNSSI) and build cost‑ed roadmaps.
• Design and implement governance frameworks, policies, standards and control catalogues, and operationalise GRC through tooling and automation (e.g., ServiceNow IRM, Archer, OneTrust).
• Run or support multi‑year transformation programmes, manage workstreams, risks and stakeholder communication.
• Contribute to practice development by identifying business opportunities, staying current on threats and regulations, and shaping service offerings.

Required profile

• 3‑5 years of experience in cybersecurity consulting or internal GRC/risk functions.
• Bachelor’s or Master’s degree in IT, engineering, information security or related field.
• Hands‑on experience delivering at least one ISMS or BCMS implementation, maturity assessment or framework rollout.
• Working knowledge of ISO 27001/27002/27005, NIST CSF 2.0 and at least one of ISO 22301, COBIT 2019, CIS Controls or MITRE ATT&CK.
• Ability to explain security risks and priorities to both technical teams and business leaders.
• Full professional proficiency in French and English (written and spoken).

Required skills

• ISO 27001, ISO 27002, ISO 27005, NIST CSF 2.0
• ISO 22301, COBIT 2019, CIS Controls, MITRE ATT&CK
• GRC platforms: ServiceNow IRM, Archer, OneTrust, Drata, Vanta
• Automation and scripting for control mapping and integration with Microsoft 365, Azure, AWS