Security GRC Analyst

Remotedxb; Dubai; On-site; AED 167,400 - 234,360; Full time

Job summary

Protective in Dubai is seeking a junior GRC professional to support risk assessments using NIST CSF, NIST 800-53, SOC 2, and CIS, and to analyze vulnerability reports for remediation.

You will develop security awareness programs, deliver governance reports via dashboards, and manage third-party risk while maintaining policies and evidence for audits.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, or related field.
• 1–3 years of experience in GRC, risk management, or compliance within cybersecurity.
• Working knowledge of regulatory frameworks and audit processes.
• Understanding of third-party/vendor risk management (TPRM) processes.
• General knowledge of security tools (network security, endpoint protection, vulnerability management).

Responsibilities

• Perform and mature enterprise risk assessments using NIST CSF, NIST 800-53, SOC 2, and CIS.
• Analyze vulnerability assessment reports to support remediation and risk reduction.
• Develop and execute security awareness programs, including training and phishing simulations.
• Deliver actionable reporting and GRC metrics via dashboards and executive presentations.
• Perform end-to-end cyber third-party risk assessments and vendor onboarding/offboarding.
• Drive process and tooling optimization for GRC platforms.
• Support governance and control management by maintaining policies and standards.
• Enable audit readiness through evidence collection and repository maintenance.
• Manage priorities using Agile methodologies.

Skills

GRC knowledge

Risk management

Compliance

Analytical skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow

Archer

Power BI

Job description

Responsibilities

• Perform and mature enterprise risk assessments using frameworks such as NIST CSF, NIST 800-53, SOC 2, and CIS
• Analyze vulnerability assessment reports to support remediation and risk reduction
• Develop and execute security awareness programs, including training and phishing simulations
• Deliver actionable reporting and GRC metrics via dashboards and executive presentations
• Perform end-to-end cyber third-party risk assessments and vendor onboarding/offboarding
• Drive process and tooling optimization for GRC platforms
• Support governance and control management by maintaining policies and standards
• Enable audit readiness through evidence collection and repository maintenance
• Manage priorities using Agile methodologies

Requirements

• Bachelor's degree in Cybersecurity, Information Systems, or related field
• 1–3 years of experience in GRC, risk management, or compliance within cybersecurity
• Working knowledge of regulatory frameworks and audit processes
• Understanding of third-party/vendor risk management (TPRM) processes
• General knowledge of security tools (network security, endpoint protection, vulnerability management)
• Foundational understanding of cloud service models (IaaS, SaaS, PaaS)
• Ability to track and report on GRC effectiveness using tools like ServiceNow, Archer, or Power BI
• Strong organizational and analytical skills

Preferred Qualifications

• Experience with cloud security compliance (Azure/AWS)
• Familiarity with UpGuard, SharePoint, or Power BI
• Certifications such as CISA, CRISC, GSEC/GISP, CISSP, CISM, CCSP, CIDSP, or Security+

About the Company

Protective helps protect customers against life's uncertainties, providing protection and peace of mind when it is needed most.