ISMS & GRC Lead — Information Security (Dubai)

Paramount Computer Systems; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, risk management, and compliance initiatives across ISO 27001 and UAE PDPL.

You will coordinate with auditors, manage third-party risk, and advise senior stakeholders on security controls and incident response. Minimum 5+ years in GRC required; CISSP/CISM/CISA welcome.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience coordinating with business units, IT, Procurement, Legal and senior management.

Responsibilities

• Develop and update information security policies based on regulatory requirements and audits.
• Define, monitor, and report security KPIs/KRIs to management per ISO 27001.
• Conduct information security risk assessments and maintain risk registers.
• Manage Third-Party Risk Management assessments and monitor vendor security risks.
• Support verification and governance review of security incidents when required.
• Ensure compliance with ISO 27001, UAE PDPL, ISR and applicable regulations.

Skills

GRC

Info security

Risk management

Compliance

Education

Bachelor’s degree in Information Security

Master’s degree in Information Security

Tools

ISO 27001

GRC tooling

Job description

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, risk management, and compliance initiatives across ISO 27001 and UAE PDPL.

You will coordinate with auditors, manage third-party risk, and advise senior stakeholders on security controls and incident response. Minimum 5+ years in GRC required; CISSP/CISM/CISA welcome.