GRC Consultant - ISO 27001 & UAE Compliance Lead

CyberA Solutions; Dubai; On-site; AED 420,000 - 660,000; Full time

Job summary

CyberA Solutions is seeking a focused security professional to lead ISO 27001 and UAE compliance engagements for mid-market clients. You will manage scoping through audit and serve as the day-to-day security contact on vCISO retainers.

In this role you’ll chair governance meetings, present to management, and work with engineering to validate/implement Microsoft 365 security controls. Dubai-based visa sponsorship available.

Qualifications

• 3-5 years in information security roles with at least 2 years delivering GRC or compliance work
• Personally delivered at least one full-cycle engagement on ISO 27001 or a comparable framework
• Practical command of risk assessment methodology and control implementation
• Working technical familiarity with enterprise identity and endpoint environment to validate controls
• Fluent spoken and written English; strong report writing and client presenting skills
• Comfortable travelling to client sites in the UAE and based in Dubai on CyberA-sponsored visa

Responsibilities

• Lead ISO 27001 and UAE compliance engagements from scoping to audit
• Act as day-to-day security point of contact on vCISO retainers
• Chair client governance meetings and present to management
• Configure or validate Microsoft 365 security controls when needed
• Produce client-ready deliverables: policies, procedures, risk registers, SOAs and assessment reports
• Contribute to proposals, scoping and effort estimation
• Manage two to three engagements in parallel with clear progress updates

Skills

Information security

GRC

Risk assessment

English proficiency

Education

ISO 27001 Lead Implementer or Lead Auditor, CISA, CRISC, CISM, or Microsoft SC-series certification

Tools

Entra ID

Intune

Defender

Job description

CyberA Solutions is seeking a focused security professional to lead ISO 27001 and UAE compliance engagements for mid-market clients. You will manage scoping through audit and serve as the day-to-day security contact on vCISO retainers.

In this role you’ll chair governance meetings, present to management, and work with engineering to validate/implement Microsoft 365 security controls. Dubai-based visa sponsorship available.