Senior Consultant – Information Security (GRC)

Paramount Computer Systems; Dubai; On-site; AED 300,000 - 420,000; Full time

Job summary

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, ISMS, risk management, and compliance, including third-party security assessments and audits.

You will drive security strategies across projects, oversee risk treatment, review vendor security clauses, and provide security advisory across initiatives, with reporting to senior management and stakeholders.

Qualifications

• 10+ years in information security or GRC.
• Bachelor’s or Master’s degree in Information Security, CS, or IS.
• Hands-on with ISO 27001, GRC, risk management, and compliance.

Responsibilities

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Skills

ISO 27001

GRC

Risk management

Compliance

Stakeholder management

Executive communication

Education

Bachelor's or Master's in Information Security/CS/IS

Tools

GRC software

Job description

Senior Consultant – Information Security (GRC)

10+ Years

DXB

Full-Time

Senior Consultant – Information Security (GRC)

Location: Dubai, UAE

Department: Information Security

Experience: 10+ years in Information Security GRC

Job Overview

We are looking for an experienced Information Security GRC Consultant to lead information security governance, ISMS, risk management, compliance, third-party security assessments, audits, and security advisory activities.

Key Responsibilities

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Requirements

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems, or a related field.
• Hands-on experience with ISO 27001, GRC, risk management, and compliance.
• Strong stakeholder management and executive communication skills.
• Experience working with business, IT, Procurement, Legal, and senior management.

Preferred Certifications

• CISSP / CISM / CISA
• CRISC