Location: Dubai, UAE
Department: Information Security
Experience: 2-4 years in Information Security GRC
Job Overview
We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.
Key Responsibilities
- Develop, review, and update information security policies based on regulatory requirements, audit findings, and industry standards.
- Define, collect, monitor, and report security KPIs/KRIs to management in line with ISO 27001.
- Conduct information security risk assessments, maintain risk registers, and monitor risk treatment and remediation.
- Manage Third-Party Risk Management (TPRM) assessments and monitor vendor security risks.
- Support verification and governance review of security incidents when required.
- Ensure compliance with ISO 27001, UAE PDPL, ISR, and applicable regulatory requirements.
- Coordinate with stakeholders, auditors, and regulatory bodies to ensure effective security governance and compliance.
Requirements
- Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
- Hands-on experience with ISO 27001, GRC, risk management, and compliance.
- Strong stakeholder management and executive communication skills.
- Experience working with business, IT, Procurement, Legal, and senior management.
Preferred Certifications
- CISSP / CISM / CISA
- CRISC
- ISO 27001 Lead Implementer / Lead Auditor
- CDPSE
