GRC Consultant ISMS BCMS

SSS Grameen Services; Dubai; On-site; AED 120,000 - 200,000; Part time

Job summary

A leading compliance firm is seeking an experienced Information Security Consultant in Dubai to conduct ISO 27001 audits and provide insights for risk management. Candidates should have at least 5 years of relevant experience, knowledge of ISO standards, and excellent communication skills. This role offers a contract-based engagement with competitive remuneration of AED 7,225 per month, plus potential for future engagement based on performance.

Qualifications

• Minimum 5 years of experience in Information Security GRC or Risk & Compliance roles.
• Proven expertise in ISO 27001 including implementation audits and compliance reporting.
• Strong ability to write professional audit/assessment reports.

Responsibilities

• Conduct ISMS (ISO 27001) follow-up audits to verify compliance.
• Perform Gap Assessments against ISO 27001 and other security standards.
• Prepare and deliver professionally written reports.

Skills

ISO 27001 compliance

Risk & Compliance

ISO 22301 knowledge

Analytical skills

Stakeholder engagement

Education

Relevant certifications (ISO 27001 Lead Auditor, ISO 22301 Lead Auditor, CISA, CISM)

Job description

Key Responsibilities

• Conduct ISMS (ISO 27001) follow-up audits to verify compliance and track remediation efforts.
• Perform Gap Assessments against ISO 27001 and other security standards to identify control deficiencies.
• Lead or support BCMS (ISO 22301) audits and assessments providing clear insights and recommendations.
• Prepare and deliver professionally written reports with actionable findings and clear summaries.
• Collaborate with internal teams and stakeholders to communicate risks gaps and proposed improvements.
• Support the design and enhancement of security governance processes as required.

Qualifications

• Minimum 5 years of experience in Information Security GRC or Risk & Compliance roles. Proven expertise in ISO 27001 including implementation audits and compliance reporting.
• Good knowledge of ISO 22301 and BCMS frameworks.
• Familiarity with other standards such as NIST CSF ISO 27005 or local regulatory frameworks is a plus.
• Strong analytical and documentation skills with the ability to write professional audit/assessment reports.
• Excellent communication and stakeholder engagement skills.
• Relevant certifications such as ISO 27001 Lead Auditor ISO 22301 Lead Auditor CISA or CISM are highly desirable.

Benefits

• Contract Type & Duration: Contract-based engagement duration to be discussed during the interview. Possibility of extension or further engagement based on project needs and performance.
• Estimated onsite Dubai/UAE contract budget: AED 7,225 per month per resource; travel, insurance, accommodation (details to be confirmed).