Senior Consultant – Information Security (GRC)

Paramount Computer System; Dubai; On-site; AED 350,000 - 500,000; Full time

Job summary

Paramount Computer System in Dubai, UAE seeks an experienced Senior Consultant for Information Security (GRC) to lead governance, risk management, and compliance initiatives across programs.

You will drive ISMS improvements, conduct third-party security assessments, and coordinate audits and advisory activities with senior stakeholders. Strong communication with business, IT, procurement, and legal is essential.

Qualifications

• 10+ years of experience in Information Security GRC.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.

Responsibilities

• Lead information security governance and the ISMS program.
• Conduct information security risk assessments and manage treatment.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and initiatives.
• Monitor security risks, audit findings, and remediation actions.
• Coordinate security awareness initiatives and reporting.

Skills

Governance

Risk management

Stakeholder management

Executive communication

Security advisory

Education

InfoSec/CS/IS degree

Job description

Senior Consultant – Information Security (GRC)

10+ Years

DXB

Full-Time

Senior Consultant – Information Security (GRC)

Location: Dubai, UAE

Department: Information Security

Experience: 10+ years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA
• CRISC