Al Mesalla ORG. For Human Resources Development
Cybersecurity Trainer Consultant
- Duhok
- Contract
- 3 hours ago
- Salary
- Not stated
- Deadline
- Nov 8, 2026
- Languages
- Arabic
Alert me about similar jobs
Trainer · Duhok
Al-Mesalla is hiring a Cybersecurity Trainer Consultant for a 3-day service contract in Duhok to prepare and deliver a one-day workshop for senior government officials and institutional stakeholders. Candidates need at least 5 years of experience in cybersecurity and training delivery, a relevant university degree, and fluency in Arabic.
About the job
Al-Mesalla.ORG for Human Resources Development is a non-governmental, non-profit civil society organization registered with both the Kurdistan Regional Government (KRG) and the Iraqi Central Government. Since 2004, Al-Mesalla has been actively operating in Iraq, focusing on civil society empowerment, women’s rights, livelihoods, peace, and justice.
As part of the approved activity on Cybersecurity Protection Procedures, Al-Mesalla proposes a one-day high-level capacity-building workshop in Duhok targeting senior women leaders, government officials and relevant institutional representatives.
The activity aims to strengthen participants' practical understanding of cybersecurity risks affecting government institutions, with particular attention to protection of official accounts, communications and sensitive information, digital identity, phishing, social engineering, digital extortion, device security and initial response to cyber incidents.
The workshop will use an interactive and practical methodology combining technical presentations, case studies, practical exercises, scenario-based simulation and application of cybersecurity protection measures.
The activity is designed around the approved objectives of strengthening digital safety, protecting official communications and data, improving account and identity security, increasing readiness to detect phishing and suspicious links, protecting devices, preventing digital extortion and strengthening initial response to cybersecurity incidents.
Responsibilities
- The Cybersecurity Specialist will provide the technical expertise required to prepare and deliver a practical, context-appropriate one-day cybersecurity workshop for senior government stakeholders in Duhok.
- understand key cybersecurity risks relevant to government work and protection of confidential information
- apply practical measures for multi-factor authentication, secure password and account management and digital identity protection
- identify phishing, suspicious links, social engineering and other common cyber threats
- strengthen protection of official devices, communications and sensitive information, including during remote work and travel
- understand and prevent risks related to digital extortion and other technology-facilitated threats
- practice appropriate initial reporting, escalation and response following a suspected cyber incident and
- identify practical cybersecurity protection measures and institutional action points applicable within participating KRG institutions.
- Developing and delivering a one-day practical and interactive cybersecurity workshop tailored to senior government stakeholders and the objectives of the activity.
- Preparing the required technical training package, presentations, case studies and practical exercises, including a concise Cybersecurity Protection Quick Guide/Cheat Sheet.
- Providing practical guidance on MFA, digital identity, secure password and account management, phishing, suspicious links, social engineering, secure communication and protection of sensitive information.
- Providing practical guidance on device and endpoint protection, including appropriate measures for official devices used during work, remote work and travel.
- Addressing digital extortion and related online threats, including prevention, safe reporting and initial response measures.
- Developing and facilitating a realistic cyber-incident simulation relevant to participating in federal institutions, allowing participants to practice identification, reporting, escalation, communication and initial response.
- Facilitating interactive discussions and practical exercises using realistic examples of cybersecurity risks affecting government institutions.
- Supporting participants to develop a simple initial cyber-incident/digital-extortion response checklist covering immediate actions, reporting channels, escalation responsibilities and communication considerations.
- Adapting all technical content and practical exercises to the Kurdistan Region's institutional and digital governance context.
- Conducting a short pre- and post-training assessment to measure knowledge improvement and identify key capacity gaps.
- Providing practical institutional cybersecurity action points and recommendations based on the training, exercises, simulation and assessment results.
- Preparing and submitting a concise technical completion report documenting the training, participant engagement, assessment results, key capacity gaps, simulation outcomes, action points and recommendations.
- Coordinating with the Al-Mesalla program team before and during the activity to ensure that the technical content and methodology are aligned with the approved objectives and participant profile.
- Technical training package and presentation materials.
- Practical exercises and case studies.
- Cybersecurity Protection Quick Guide/Cheat Sheet.
- Cyber-incident simulation scenario and facilitation materials.
- Pre- and post-training assessment tools.
- Initial Cyber-Incident/Digital Extortion Response Checklist.
- Institutional cybersecurity action points and practical recommendations.
- One-day workshop delivery.
- Concise technical completion report.
Requirements
- University degree in Cybersecurity, Information Technology, Computer Engineering, Computer Science or another relevant field.
- At least 5 years of relevant professional and/or training experience in cybersecurity, digital security or information protection.
- Demonstrated experience designing and delivering practical cybersecurity training for government institutions, public-sector personnel or organizations.
- Strong practical knowledge of cybersecurity awareness and risk management, MFA and digital identity protection, secure password and account management, Phishing and social engineering, information and data protection, device security, digital extortion, cyber-incident identification and initial response.
- Experience facilitating practical exercises, case studies and cybersecurity simulations.
- Good understanding of the Kurdistan Region's institutional and digital governance context.
- Strong communication, presentation and facilitation skills.
- Fluency in Arabic is required; English proficiency is an advantage.
Working hours
- Assignment Type: One-Day Workshop
- Contract Type: Service Contract
- Duration / Contract Period in November 2026: Three (3) working days in total, one (1) working day for the delivery of the workshop session and two (2) working days for the preparation and development of workshop materials, content, and submission of the workshop report result of pre- and post-tests.
Skills
- Cybersecurity
- Training facilitation
- Data protection
- Incident response
- Phishing detection
Details
- Profession
- Trainer
- Category
- Education & Teaching
- Education
- Bachelor's degree
- Experience
- 5+ years
How to apply
- Required CV Format: PDF only
- Email Subject: Cybersecurity Trainer Consultant - Duhok
- Please ensure that your CV is submitted in PDF format and that the required position title is clearly stated in the email subject line.