Senior Consultant – Information Security (GRC)

Senior Consultant – Information Security (GRC) Location: Dubai, UAE Department: Information Security Experience: 10+ years in Information Security GRC Job Overview We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities. Key Responsibilities - Manage and continuously improve the ISMS and information security governance framework. - Conduct information security risk assessments and manage risk treatment activities. - Perform third-party/vendor security assessments and due diligence. - Review security requirements and clauses in vendor contracts. - Support ISO 27001 audits, certification, and compliance activities. - Provide security advisory support across projects and business initiatives. - Monitor security risks, audit findings, and remediation activities. - Support information security incident governance and corrective actions. - Coordinate security awareness initiatives and reporting. Requirements - Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field. - Hands-on experience with ISO 27001, GRC, risk management, and compliance. - Strong stakeholder management and executive communication skills. - Experience working with business, IT, Procurement, Legal, and senior management. Preferred Certifications - CISSP / CISM / CISA - CRISC - ISO 27001 Lead Implementer / Lead Auditor - CDPSE