Compliance Officer – Cybersecurity GRC & vCISO

About the role

We are expanding our cybersecurity practice in Bahrain and seek a Compliance Officer to work at the intersection of governance, risk, compliance and executive advisory. The role supports clients across Bahrain, the GCC and international markets, helping them move beyond checklist compliance to build resilient cybersecurity programs.

Key responsibilities

• Lead and support vCISO and GRC engagements for regional and global clients.
• Assess cybersecurity maturity, governance structures, policies, controls and risk exposure.
• Translate regulatory requirements and technical findings into actionable roadmaps.
• Advise on cybersecurity governance, risk management and regulatory compliance.
• Support implementation of international and regional cybersecurity frameworks and standards.
• Develop strategies, policies, risk registers, governance frameworks and executive reports.
• Collaborate with SOC, penetration testing, incident response, threat intelligence and architecture teams.
• Participate in client workshops, steering committees, risk reviews and executive presentations.
• Coordinate with project managers to ensure successful delivery of engagements.
• Contribute to the growth of ZENDATA’s global vCISO and compliance practice.

Required profile

• 3–5 years of experience in cybersecurity governance, risk, compliance or information security.
• Strong understanding of cybersecurity risk beyond documentation.
• Ability to communicate confidently with technical teams and senior management.
• Excellent analytical, reporting and presentation skills.
• Proactive, solution‑oriented mindset and ability to manage multiple engagements.
• Professional English communication skills.

Required skills

• Experience with ISO 27001, NIST, PCI DSS, CIS Controls.
• Knowledge of data protection regulations and cloud governance.
• Familiarity with penetration testing, incident response and threat intelligence.
• Understanding of cybersecurity architecture concepts.