(code : SS) onsite dubai contract short term extendable GRC consultant ISMS and BCMS

SSS Grameen Services; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading company in the UAE seeks an experienced professional in Information Security. The role involves conducting ISO audits, performing gap assessments, and collaborating with internal teams. Ideal candidates should possess extensive knowledge of ISO standards and strong analytical skills, ensuring effective risk and compliance management.

Qualifications

• Minimum 5 years in Information Security, GRC, or Risk & Compliance roles.
• Proven expertise in ISO 27001 with experience in compliance reporting.
• Familiar with NIST CSF and ISO 22301.

Responsibilities

• Conduct ISO 27001 follow-up audits and track remediation.
• Perform Gap Assessments against security standards.
• Prepare and deliver audit reports with actionable findings.

Skills

Analytical skills

Documentation skills

Communication

Stakeholder engagement

Education

ISO 27001 Lead Auditor

ISO 22301 Lead Auditor

CISA

CISM

Job description

• Conduct ISMS (ISO 27001) follow-up audits to verify compliance and track remediation efforts.
• Perform Gap Assessments against ISO 27001 and other security standards to identify control deficiencies.
• Lead or support BCMS (ISO 22301) audits and assessments, providing clear insights and recommendations.
• Prepare and deliver professionally written reports with actionable findings and clear summaries.
• Collaborate with internal teams and stakeholders to communicate risks, gaps, and proposed improvements.
• Support the design and enhancement of security governance processes as required.

Requirements

Qualifications :

• Minimum 5 years of experience in Information Security, GRC, or Risk & Compliance roles.
• Proven expertise in ISO 27001, including implementation, audits, and compliance reporting.
• Good knowledge of ISO 22301 and BCMS frameworks.
• Familiarity with other standards such as NIST CSF, ISO 27005, or local regulatory frameworks is a plus.
• Strong analytical and documentation skills, with the ability to write professional audit / assessment reports.
• Excellent communication and stakeholder engagement skills.
• Relevant certifications such as ISO 27001 Lead Auditor, ISO 22301 Lead Auditor, CISA, or CISM are highly desirable.

Contract Type & Duration :

• Contract-based engagement, duration to be discussed during the interview.
• Possibility of extension or further engagement based on project needs and performance.
• estimated onsite dubai / UAE contract budget aed 7225 per month per resource + travel + insurance + accommodation