Security & GRC Program Lead

Remotedxb; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

Cambium Learning Group is seeking an experienced Information Security Lead to advance the organization's security program across governance, risk, and compliance. You will oversee audits, implement controls, and drive improvements to protect data and systems.

You will collaborate with cross-functional teams, manage risk assessments, and deliver training while ensuring alignment with ISO, GovRAMP, FedRAMP, and privacy laws. This role is based in Dubai and requires hands-on security leadership.

Qualifications

• Bachelor's degree in a related field.
• Minimum 5 years hands-on information security experience.
• Strong knowledge of security/privacy frameworks and best practices.
• Familiarity with GDPR, COPPA, and FERPA.
• Certifications such as CISSP, GIAC, ISACA, or AWS Security.
• Experience with GRC tools and risk assessments.

Responsibilities

• Maintain and mature the information security program to conform with ISO, GovRAMP, FedRAMP, NIST, SOC, CIS Top Controls.
• Coordinate annual external audits and remediation.
• Plan and manage multiple security improvement projects end-to-end.
• Oversee document control and compliance artifacts.
• Lead security awareness and training programs with reporting.
• Support proposals with security/privacy responses.
• Conduct enterprise risk assessments and report to senior management.
• Manage privacy risks related to cookies, APIs, and policy compliance.

Skills

Information security

Security frameworks

Privacy laws

Audits & compliance

Education

Bachelor's degree in Information Security / Cybersecurity / CS / Engineering

Tools

GRC tools

Security assessment tools

Job description

Cambium Learning Group is seeking an experienced Information Security Lead to advance the organization's security program across governance, risk, and compliance. You will oversee audits, implement controls, and drive improvements to protect data and systems.

You will collaborate with cross-functional teams, manage risk assessments, and deliver training while ensuring alignment with ISO, GovRAMP, FedRAMP, and privacy laws. This role is based in Dubai and requires hands-on security leadership.