Cybersecurity GRC Consultant

DTS Solution; Dubai; On-site; AED 100,000 - 140,000; Full time

Job summary

A leading company in the cybersecurity domain is seeking a talented Information Security Consultant to assess and enhance the security posture of various organizations. This role involves conducting comprehensive security assessments, collaborating with clients, and developing security policies. Ideal candidates will possess substantial experience in information security and relevant certifications, aiming to stay ahead of industry standards and emerging threats.

Qualifications

• Proven experience in information security consulting, ideally in diverse industries.
• Deep understanding of information security principles and industry best practices.
• Familiarity with security frameworks like ISO 27001, NIST, and PCI-DSS.

Responsibilities

• Conduct security assessments and risk analyses against cybersecurity standards.
• Perform compliance assessments and security audits for security effectiveness.
• Develop and implement information security policies, standards, and procedures.

Skills

Information Security

Risk Management

Data Governance

Data Privacy Regulations

Analytical Skills

Problem Solving

Communication Skills

Education

Bachelor's degree in Computer Science

CISSP Certification

CISM Certification

CISA Certification

Tools

Security Assessment Tools

Vulnerability Scanning Tools

Intrusion Detection Systems

Encryption Tools

Job description

• Conduct comprehensive security assessments and risk analyses to identify gals against information and cybersecurity standards.
  
• Perform compliance assessment.
  
• Collaborate with clients and internal teams to develop and implement information security policies, standards, and procedures.
  
• Perform security audits to evaluate the effectiveness of security controls and systems.
  
• Analyze and interpret security assessment findings, and provide recommendations for remediation.
  
• Strong knowledge on data governance, data privacy regulations and protection requirements.
  
• Advise on security best practices, industry standards, and emerging trends to enhance the organization's security posture.
  
• Develop and deliver security awareness training programs to educate employees about information security practices and policies.
  
• Comprehensive knowledge on security incidents and process flow to respond to security breaches or other cybersecurity-related issues in a timely manner.
  
• Evaluate and recommend security practices and solutions, such as firewalls, intrusion detection systems, and encryption tools.
  
• Collaborate with cross-functional teams to ensure security requirements are integrated into system development lifecycle processes.
  
• Stay up to date with the latest security threats, vulnerabilities, and technologies through continuous learning and professional development.
  

Preferred Candidate Profile

• Bachelor's degree in Computer Science, Information Systems, or a related field. Relevant certifications (e.g., CISSP, CISM, CISA) are highly desirable.
  
• Proven experience in information security consulting or a similar role, preferably in diverse industries.
  
• Deep understanding of information security principles, risk management, and industry best practices.
  
• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, PCI-DSS).
  
• Strong knowledge of management policy development
  
• Strong knowledge on technical policy development - network security, application security, encryption technologies, and secure coding practices.
  
• Experience with security assessment tools and techniques, interpreting results from vulnerability scanning and penetration testing and translating into gaps.
  
• Excellent analytical and problem-solving skills, with the ability to assess complex security risks and provide practical recommendations.
  
• Strong communication and interpersonal skills to effectively collaborate with clients, stakeholders, and technical teams.
  
• Ability to prioritize tasks, manage multiple projects simultaneously, and meet deadlines.
  
• Ethical and professional conduct with a commitment to maintaining confidentiality and integrity.
  

Disclaimer: Naukrigulf.com is only a platform to bring jobseekers & employers together. Applicants are advised to research the bonafides of the prospective employer independently. We do NOT endorse any requests for money payments and strictly advice against sharing personal or bank related information. We also recommend you visit Security Advice for more information. If you suspect any fraud or malpractice, email us at [e-mail]