Senior Consultant Information Security GRC

Paramount Computer Systems; Dubai; On-site; AED 300,000 - 600,000; Full time

Job summary

Paramount Computer Systems in Dubai is seeking an experienced Senior Consultant – Information Security (GRC) to drive governance, ISMS, risk, and compliance across the organization.

You will perform third-party security assessments, support ISO 27001 audits, and provide security advisory across projects while coordinating with business, IT, procurement, legal, and senior management.

Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience collaborating with business, IT, Procurement, Legal and senior management.

Responsibilities

• Lead information security governance and the ISMS program.
• Conduct information security risk assessments and manage treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and initiatives.
• Monitor security risks, audit findings, and remediation efforts.
• Coordinate security awareness initiatives and reporting.
• Oversee incident governance and corrective actions.

Skills

Information Security Governance

ISMS

Risk Management

Stakeholder Management

Security Compliance

Education

Bachelor’s or Master’s in Information Security/CS/IS

Job description

Job Description:

Senior Consultant – Information Security (GRC)

Location: Dubai, UAE

Department: Information Security

Experience: 10+ years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA
• CRISC
• ISO 27001 Lead Implementer / Lead Auditor
• CDPSE