Information Security Consultant

Commercial Ilerda D'Automocio; Sharjah; On-site; AED 300,000 - 520,000; Full time

Job summary

Dautom is seeking an Information Security Consultant/Expert in Sharjah to lead governance, risk, and compliance initiatives for a global client. This role requires deep knowledge of security standards, risk assessment, and incident response.

You will mentor the security team, oversee third-party assessments, develop security strategies, and report to stakeholders. A strong background in regulatory requirements and cross-functional collaboration is essential.

Qualifications

• Master's or bachelor's degree in computer science, MIS, or related fields.
• 15+ years experience for bachelors; 12+ years for master's/doctorate.

Responsibilities

• Supervise governance, risk, compliance, and assurance activities.
• Lead security risk assessments, control reviews, and compliance activities.
• Coordinate with auditors, regulators, and security providers.
• Develop and implement information security strategy and roadmap.
• Establish security policies, standards, guidelines, and procedures.
• Mentor information security team and allocate resources.

Skills

Information security governance

Regulatory compliance

Risk assessment

Security controls

Leadership

Project management

Communication skills

Cross-functional collaboration

Education

Master's or Bachelor's in CS/MIS

Job description

Client Introduction

In this role, you will collaborate closely with one of our esteemed clients-a globally recognized leader in their industry, distinguished by their commitment to excellence, innovation, and delivering exceptional value. As a trusted IT consulting partner, Dautom is supporting their strategic initiatives by connecting them with exceptional talent to drive business growth and transformation.

Role: Information Security Consultant

Job Location: Sharjah

Notice: 30 Days

Information Security Consultant/Expert

Job responsibilities

• Supervise and oversee information security governance, risk, compliance, and assurance activities.
• Lead and guide the team in security risk assessments, control reviews, and security compliance activities.
• Supervise third-party/vendor security assessments and associated risk management activities.
• Monitor compliance with applicable cybersecurity regulations, standards, and organizational requirements.
• Coordinate with internal and external auditors, regulators, and security service providers.
• Mentor and provide direction to information security team members and ensure effective delivery of assigned activities.
• Develop and execute information security strategy and roadmap in alignment with business goals, industry standards, and regulatory requirements.
• Establish and maintain information security policies, standards, guidelines, and procedures.
• Identify and assess potential security risks and vulnerabilities through risk assessments and develop risk mitigation strategies and controls.
• Develop and maintain an incident response plan to address security incidents effectively. Coordinate incident response activities, including detection, analysis, containment, eradication, and recovery.
• Oversee the implementation and management of security controls, technologies, and solutions.
• Conduct periodic security audits, assessments, and penetration testing to evaluate the effectiveness of security controls and identify areas for improvement.
• Evaluate and manage the security risks associated with third-party vendors and service providers.
• Coordinate with SOC and technical teams for security incidents, risk remediation, and corrective actions.
• Prepare and deliver security reports, metrics, and updates to stakeholders, and relevant committees.
• Provide leadership, guidance, and mentorship to the information security team. Manage and allocate resources effectively to meet security objectives.
• Communicate project progress, status, risks, and issues to relevant stakeholders and senior management.
• Engage and manage relationships with project stakeholders, including business owners, project sponsors, vendors, and external partners. Review and provide security oversight for projects, applications, infrastructure, cloud services, and technology changes.
• Review security exceptions, risk acceptance requests, and remediation plans.
• Develop and monitor information security KPIs, KRIs, audit findings, and management reports.
• Identify security gaps and lead initiatives to improve the organization's overall security posture.
• Provide security guidance and advisory support to management and business/technical stakeholders.

Skills

• Strong understanding of information security principles, concepts, best practices, and regulatory requirements.
• Ability to effectively plan, execute, and control projects, ensuring they are delivered on time, within budget, and according to quality standards.
• Identify, assess, and mitigate risks associated with projects. Develop risk mitigation strategies and controls to address identified risks.
• Evaluate security controls and mechanisms for project solutions.
• Excellent communication skills, both verbal and written.
• Strong leadership skills to guide and motivate project teams.
• Knowledge of security governance frameworks, regulatory requirements, and standards.
• Familiarity with change management principles and methodologies.
• Strong problem-solving and critical-thinking skills to identify and address project-related security challenges.
• Effective collaboration skills to work with cross-functional teams, negotiate priorities, and resolve conflicts.
• Align security initiatives with business objectives and demonstrate the value of information security to senior management.

Qualifications & Work Experience

Qualification

Master's or bachelor's degree in computer science, Management Information Systems, or other related fields.

Experience

• Practical experience required for a minimum of (15) years or more for holders of bachelor's degree and (12) years or more for holders of master's or doctoral degrees.

About Dautom

Dautom is a globally recognized IT consulting and technology services organization committed to enabling digital transformation through innovation, expertise, and a people-centric approach.

We partner with leading organizations across industries to accelerate business growth by delivering exceptional talent, strategic IT consulting services, and innovative technology solutions. With a strong global presence and deep industry expertise, Dautom empowers businesses to enhance operational excellence, embrace digital evolution, and achieve sustainable success.