GRC Analyst: Lead Compliance, Risk & Audit (ISO 27001/SOC 2)

APPIT Software Inc.; Dubai; On-site; AED 150,000 - 200,000; Full time

Job summary

APPIT Software Inc. is looking for an experienced compliance specialist to manage and maintain compliance programs across various frameworks such as ISO 27001 and SOC 2. The role involves coordinating audits and risk assessments, developing information security policies, and preparing compliance reports for stakeholders.

The ideal candidate will have over 4 years of relevant experience and strong knowledge of auditing processes. Familiarity with GRC platforms is a plus. This position is located in Dubai, United Arab Emirates.

Qualifications

• 4+ years of experience in GRC, IT audit, or information security compliance roles.
• Strong working knowledge of ISO 27001, ISO 27002, SOC 2, NIST CSF and regional frameworks (NESA IAS).
• Experience managing audit cycles end-to-end including scoping, evidence collection and remediation tracking.
• Understanding of risk management methodologies (FAIR, NIST RMF, ISO 31000).
• Excellent written and verbal communication skills.

Responsibilities

• Manage and maintain compliance programs across ISO 27001, SOC 2, NESA and GDPR frameworks.
• Conduct enterprise risk assessments and maintain the risk register.
• Coordinate internal and external audit activities.
• Develop, review and update information security policies.
• Perform third-party vendor risk assessments and manage the vendor security review lifecycle.

Skills

ISO 27001

SOC 2

Risk Assessment

Audit Management

NIST CSF

Vendor Risk Management

Policy Development

Tools

ServiceNow GRC

OneTrust

Archer

Job description

APPIT Software Inc. is looking for an experienced compliance specialist to manage and maintain compliance programs across various frameworks such as ISO 27001 and SOC 2. The role involves coordinating audits and risk assessments, developing information security policies, and preparing compliance reports for stakeholders.

The ideal candidate will have over 4 years of relevant experience and strong knowledge of auditing processes. Familiarity with GRC platforms is a plus. This position is located in Dubai, United Arab Emirates.