Information Security – GRC

About the Role:

We are seeking a seasoned Information Security GRC professional to join our Dubai office. In this role, you will drive the development and execution of governance, risk management, and compliance initiatives that protect our information assets and ensure adherence to regulatory and industry standards. You will collaborate with cross-functional teams, influence senior stakeholders, and continuously enhance our security posture.

Responsibilities:

• Develop, implement, and maintain information security governance frameworks, policies, and procedures aligned with ISO 27001, NIST CSF, and regional regulations.
• Conduct regular risk assessments and gap analyses, and coordinate remediation activities with IT and business units.
• Lead and support internal and external audits, track findings, and drive closure of compliance issues.
• Monitor changes in local and international data protection and cybersecurity regulations and ensure organizational readiness.
• Collaborate with stakeholders to integrate security controls into projects, systems, and processes throughout the SDLC.
• Design and deliver security and compliance awareness training programs for staff and management.
• Prepare and present regular reports on risk posture, compliance status, and key metrics to senior leadership.
• Manage third-party and vendor security risk assessments, due diligence, and ongoing monitoring.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 4–6 years of hands-on experience in information security and GRC roles.
• Strong technical knowledge of information security frameworks (ISO 27001, NIST CSF) and risk management methodologies.
• Experience implementing and managing compliance programs for GDPR, PCI DSS, UAE Data Protection Law, or equivalent regulations.
• Proficiency with risk assessment tools and methodologies, as well as audit lifecycle management.
• Excellent analytical skills and attention to detail with the ability to interpret and apply regulatory requirements.
• Effective communication and stakeholder management skills across technical and non-technical audiences.

Preferred Qualifications:

• CISSP, CISM, CRISC, or CISA certification.
• Experience with cloud security governance in AWS, Azure, or GCP environments.
• Familiarity with COBIT and ITIL frameworks.
• Previous work experience in the Middle East, particularly the UAE market.
• Arabic language proficiency.
• Master’s degree in Cybersecurity, Information Assurance, or a related discipline.