Cyber GRC Analyst

TASC Outsourcing; Abu Dhabi; On-site; AED 120,000 - 160,000; Full time

Job summary

TASC Outsourcing is seeking a Cyber GRC Analyst to join our team in the United Arab Emirates. The successful candidate will ensure our information security and compliance posture meets both regional and international standards. You will collaborate with various stakeholders to enhance Governance, Risk, and Compliance frameworks.

Responsibilities include conducting risk assessments, managing GRC platforms, and supporting audits. Required qualifications include experience with cybersecurity frameworks, a Bachelor's degree in a relevant field, and strong analytical skills.

Qualifications

• 2-4 years of experience in Cybersecurity GRC or a related role.
• Hands‑on experience with ISO27001, NIST CSF, NCA ECC, SAMA CSF frameworks.
• Bachelor's degree in a related field is required.

Responsibilities

• Conduct regular risk assessments and gap analyses.
• Develop, update, and maintain policies and procedures.
• Configure and manage GRC platforms.

Skills

Cybersecurity GRC experience

ISO27001 expertise

NIST CSF knowledge

Strong analytical skills

Communication skills

Problem-solving abilities

Education

Bachelor's degree in Computer Science

Bachelor's degree in Information Security

Tools

ServiceNow GRC

OneTrust

Archer

Job description

About the Role

We are seeking a Cyber GRC Analyst to join our team in the United Arab Emirates. In this role you will ensure the organization s information security and compliance posture meets regional and international standards. You will work closely with stakeholders to implement, monitor, and enhance Governance, Risk, and Compliance frameworks using leading tools and best practices.

Responsibilities

• Conduct regular risk assessments and gap analyses against ISO27001, NIST CSF, NCA ECC, and SAMA CSF frameworks
• Develop, update, and maintain policies, procedures, and control matrices
• Configure, manage, and optimize GRC platforms including ServiceNow, OneTrust, and Archer
• Support internal and external audits and regulatory examinations
• Track and report on compliance metrics and risk remediation progress
• Collaborate with IT, legal, and business teams to address compliance issues and remediate findings
• Stay current with UAE regulatory requirements and industry trends, advising on necessary adjustments

Required Qualifications

• 2-4 years of experience in Cybersecurity GRC or a related role
• Hands‑on experience with ISO27001, NIST CSF, NCA ECC, and SAMA CSF frameworks
• Proficiency in configuring and using ServiceNow GRC, OneTrust, and Archer
• Bachelor's degree in Computer Science, Information Security, or a related field
• Strong analytical, communication, and problem‑solving skills
• Ability to work independently and collaborate with cross‑functional teams
• Understanding of UAE regulatory landscape for information security

Preferred Qualifications

• Professional certifications such as CISA, CISSP, CRISC, or ISO27001 Lead Implementer
• Experience with data privacy regulations and frameworks such as PDPL, GDPR
• Prior exposure to financial services or government sector GRC requirements
• Knowledge of additional GRC platforms or automation tools
• Advanced report writing and presentation skills