GRC Consultant

Paramount Computer Systems; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, risk management, and compliance initiatives across ISO 27001 and UAE PDPL.

You will coordinate with auditors, manage third-party risk, and advise senior stakeholders on security controls and incident response. Minimum 5+ years in GRC required; CISSP/CISM/CISA welcome.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience coordinating with business units, IT, Procurement, Legal and senior management.

Responsibilities

• Develop and update information security policies based on regulatory requirements and audits.
• Define, monitor, and report security KPIs/KRIs to management per ISO 27001.
• Conduct information security risk assessments and maintain risk registers.
• Manage Third-Party Risk Management assessments and monitor vendor security risks.
• Support verification and governance review of security incidents when required.
• Ensure compliance with ISO 27001, UAE PDPL, ISR and applicable regulations.

Skills

GRC

Info security

Risk management

Compliance

Education

Bachelor’s degree in Information Security

Master’s degree in Information Security

Tools

ISO 27001

GRC tooling

Job description

Job Description:

GRC Consultant – Information Security (GRC)

Location: Dubai, UAE

Department: Information Security

Experience: 5+ years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Develop, review, and update information security policies based on regulatory requirements, audit findings, and industry standards.
• Define, collect, monitor, and report security KPIs/KRIs to management in line with ISO 27001.
• Conduct information security risk assessments, maintain risk registers, and monitor risk treatment and remediation.
• Manage Third-Party Risk Management (TPRM) assessments and monitor vendor security risks.
• Support verification and governance review of security incidents when required.
• Ensure compliance with ISO 27001, UAE PDPL, ISR, and applicable regulatory requirements.
• Coordinate with stakeholders, auditors, and regulatory bodies to ensure effective security governance and compliance.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA
• CRISC
• ISO 27001 Lead Implementer / Lead Auditor
• CDPSE