GRC Consultant

GRC Consultant – Information Security (GRC)

Location: Dubai, UAE

Department: Information Security

Experience: 5+ years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Develop, review, and update information security policies based on regulatory requirements, audit findings, and industry standards.
• Define, collect, monitor, and report security KPIs/KRIs to management in line with ISO 27001.
• Conduct information security risk assessments, maintain risk registers, and monitor risk treatment and remediation.
• Manage Third-Party Risk Management (TPRM) assessments and monitor vendor security risks.
• Support verification and governance review of security incidents when required.
• Ensure compliance with ISO 27001, UAE PDPL, ISR, and applicable regulatory requirements.
• Coordinate with stakeholders, auditors, and regulatory bodies to ensure effective security governance and compliance.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA
• CRISC
• ISO 27001 Lead Implementer / Lead Auditor
• CDPSE