Junior GRC Consultant

Paramount Computer Systems; Dubai; On-site; AED 120,000 - 180,000; Full time

Job summary

Paramount Computer Systems in Dubai is seeking an experienced Information Security GRC Consultant to lead governance, ISMS programs, risk management, and third‑party security assessments.

You will define security policies, monitor KPIs/KRIs, and ensure compliance with ISO 27001, UAE PDPL, and ISR, coordinating with auditors and stakeholders across the business.

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Responsibilities

• Develop, review, and update information security policies based on regulatory requirements, audit findings, and industry standards.
• Define, collect, monitor, and report security KPIs/KRIs to management in line with ISO 27001.
• Conduct information security risk assessments, maintain risk registers, and monitor risk treatment and remediation.
• Manage Third-Party Risk Management (TPRM) assessments and monitor vendor security risks.
• Support verification and governance review of security incidents when required.
• Ensure compliance with ISO 27001, UAE PDPL, ISR, and applicable regulatory requirements.
• Coordinate with stakeholders, auditors, and regulatory bodies to ensure effective security governance and compliance.

Skills

Information Security

GRC

ISO 27001

Risk management

Compliance

Stakeholder management

Executive communication

Education

Bachelor's or Master's degree in Information Security/CS/IS

Job description

Location: Dubai, UAE

Department: Information Security

Experience: 2-4 years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Develop, review, and update information security policies based on regulatory requirements, audit findings, and industry standards.


• Define, collect, monitor, and report security KPIs/KRIs to management in line with ISO 27001.


• Conduct information security risk assessments, maintain risk registers, and monitor risk treatment and remediation.


• Manage Third-Party Risk Management (TPRM) assessments and monitor vendor security risks.


• Support verification and governance review of security incidents when required.


• Ensure compliance with ISO 27001, UAE PDPL, ISR, and applicable regulatory requirements.


• Coordinate with stakeholders, auditors, and regulatory bodies to ensure effective security governance and compliance.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.


• Hands‑on experience with ISO 27001, GRC, risk management, and compliance.


• Strong stakeholder management and executive communication skills.


• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA


• CRISC


• ISO 27001 Lead Implementer / Lead Auditor


• CDPSE