GRC Analyst

Rezilens; Dubai; On-site; AED 150,000 - 200,000; Full time

Job summary

Rezilens seeks a GRC Analyst in Dubai to be the in-house expert for DiGRC, their AI-driven Governance, Risk, and Compliance platform. In this hybrid role, you will lead workshops and training sessions, translating complex regulatory requirements into effective solutions for clients.

Qualified candidates should have a Bachelor's or Master's degree in Information Security or a related field, with a minimum of 3 years experience in GRC roles and a strong understanding of GRC frameworks. The position promises an engaging work environment with the flexibility of hybrid working.

Qualifications

• Minimum of 3 years of experience in GRC roles.
• Proven track record in leading client workshops.
• Deep understanding of several GRC frameworks including ISO 27001 and NIST.

Responsibilities

• Develop demos and workshops for DiGRC's capabilities.
• Lead requirement-gathering and configure DiGRC modules.
• Own project plans and coordinate cross-functional teams.

Skills

GRC frameworks understanding

Client workshop delivery

Technical communication skills

GRC platform implementation

Data integration knowledge

Education

Bachelor's or Master's degree in Information Security, Risk Management, or related field

Tools

Workflow engines

Dashboarding tools

Job description

Rezilens is a global leader in business transformation consulting, helping organizations of all sizes navigate complexity through our four-pillar approach: Strategic Foresight, Intelligent Solutions, Trust & Resilience, and Adaptive Transformation. Headquartered in Dubai with origins in Australia, we empower businesses worldwide to reduce risk, accelerate compliance, and drive innovation with measurable outcomes.

About the Role

We're seeking a dedicated GRC Analyst to join our team in Dubai as the in-house expert for DiGRC, our AI-driven Governance, Risk, and Compliance platform. In this hybrid role, you'll lead client workshops and internal trainings ("Presenter"), and drive end-to-end DiGRC deployments ("Implementor"). You'll translate complex regulatory requirements into pragmatic solutions, ensuring our clients harness the full power of DiGRC to manage risk, streamline compliance, and enhance governance.

Key Responsibilities

DiGRC Presentation & Training:

• Develop and deliver engaging demos, workshops, and webinars showcasing DiGRC's capabilities
• Tailor presentations to various audiences: C-Suite executives, IT/security teams, and audit/compliance managers
• Produce clear user guides, cheat-sheets, and training materials

Solution Implementation & Configuration:

• Lead requirement-gathering sessions with clients to map their GRC processes and regulatory landscape
• Configure DiGRC modules (Risk Management, Compliance, Audit, ESG Integration, Whistleblowing, etc.) to meet client needs
• Build custom workflows in the DIFLOW automation engine for end-to-end process orchestration

Project Management & Stakeholder Engagement:

• Own project plans, timelines, and deliverables for POC and full-scale deployments
• Coordinate cross-functional teams including development, QA, and support
• Provide regular status updates and risk assessments to stakeholders

Technical & Business Analysis:

• Analyze client data sources (vulnerability scans, incident logs, policies) and integrate into DiGRC's centralized repository
• Define Key Risk Indicators (KRIs), control libraries, and reporting dashboards aligned to frameworks (ISO 27001, NESA, ECC, NIST, GDPR, SOC, etc.)
• Recommend process improvements leveraging AI-driven insights and predictive analytics

Required Skills

• Education: Bachelor's or Master's degree in Information Security, Risk Management, Business Administration, or related field
• Experience: 3+ years in GRC roles, with hands-on experience in implementing GRC platforms
• Proven track record delivering client workshops or training sessions
• Technical Skills: Deep understanding of GRC frameworks (ISO 31000, ISO 27001, COBIT, NIST, PCI DSS, GDPR, etc.)
• Experience with workflow engines or automation tools
• Familiarity with data integration (APIs, web services) and dashboarding tools
• Soft Skills: Excellent verbal and written communication - able to simplify complex topics