Information Security – Third-Party Risk management consultant

Dicetek LLC; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

Dicetek LLC is seeking an experienced information security professional to lead third-party risk management initiatives in Dubai. The role focuses on assessing security posture, regulatory alignment, and contractual risk across our vendor ecosystem.

Responsibilities include deploying TPRM frameworks, evaluating SOC and penetration test results, and defining security requirements for vendor engagements to ensure ongoing protection and compliance.

Qualifications

• 5-8 years of experience in Information Security, Cybersecurity, IT Risk, or Third-Party Risk Management.
• Strong knowledge of TPRM / Vendor Risk Management.
• Familiarity with ISO 27001, NIST, CIS Controls, and COBIT.
• Understanding of cloud security, data privacy, IAM, network security, vulnerability management, and BC.

Responsibilities

• Develop and implement robust third-party risk management (TPRM) frameworks, policies and procedures.
• Conduct risk assessments of vendors evaluating security posture, compliance, and resilience.
• Analyze vendor security docs including SOC reports, pen tests, and privacy policies to quantify risks.
• Define and manage security requirements and contractual clauses for third-party engagements.

Skills

TPRM / Vendor Risk Management

Cloud Security

GRC & Risk Assessment

Stakeholder Management

Security Documentation Analytics

Tools

GRC tools

Job description

Responsibilities

• Develop and implement robust third-party risk management TPRM frameworks, policies and procedures tailored to the organization s risk appetite.
• Conduct comprehensive risk assessments of potential and existing third-party vendors evaluating their security posture, compliance, and operational resilience.
• Analyze vendor security documentation including SOC reports, penetration test results, and privacy policies to identify and quantify potential risks.
• Define and manage security requirements and contractual clauses for third-party engagements ensuring alignment with regulatory obligations and industry best practices.

Requirements

• 5-8 years of experience in Information Security, Cybersecurity, IT Risk, or Third-Party Risk Management.
• Strong knowledge of TPRM / Vendor Risk Management.
• Experience with security frameworks such as ISO 27001, NIST, CIS Controls, and COBIT.
• Understanding of cloud security, data privacy, IAM, network security, vulnerability management, and business continuity.
• Experience reviewing SOC reports, ISO certificates, penetration testing reports, and security questionnaires.
• Knowledge of risk assessment and GRC tools.
• Strong analytical, documentation, and stakeholder management skills.
• Relevant certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 are preferred.