Senior Consultant – Information Security (GRC)
Location: Dubai, UAE
Department: Information Security
Experience: 10+ years in Information Security GRC
Job Overview
We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.
Key Responsibilities
-
Manage and continuously improve the ISMS and information security governance framework.
-
Conduct information security risk assessments and manage risk treatment activities.
-
Perform third-party/vendor security assessments and due diligence.
-
Review security requirements and clauses in vendor contracts.
-
Support ISO 27001 audits, certification, and compliance activities.
-
Provide security advisory support across projects and business initiatives.
-
Monitor security risks, audit findings, and remediation activities.
-
Support information security incident governance and corrective actions.
-
Coordinate security awareness initiatives and reporting.
Requirements
-
Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
-
Hands-on experience with ISO 27001, GRC, risk management, and compliance.
-
Strong stakeholder management and executive communication skills.
-
Experience working with business, IT, Procurement, Legal, and senior management.
Preferred Certifications
-
CISSP / CISM / CISA
-
CRISC
-
ISO 27001 Lead Implementer / Lead Auditor
-
CDPSE