Senior Consultant – Information Security (ISR - DESC)

Paramount Computer Systems; Abu Dhabi; On-site; AED 320,000 - 520,000; Full time

Job summary

Paramount Computer Systems in Abu Dhabi seeks a Senior Consultant – Information Security to lead governance, ISMS, risk and compliance initiatives. You will partner with business units, IT, procurement, legal, HR, and leadership to align security with ISO 27001 and UAE PDPL requirements.

You will drive third‑party risk assessments, contract reviews, audit coordination, and security advisory across the organization, ensuring effective risk management and reporting.

Qualifications

• Bachelor’s or Master’s degree in Information Security, CS, IS, or related field.
• 10+ years overall experience with at least 6+ years in Information Security GRC.
• Hands-on ISO 27001 implementation experience.
• Experience conducting third-party security assessments.
• Experience reviewing technology contracts and security clauses.
• Experience supporting audits and certification activities.
• Experience engaging with business and executive stakeholders.

Responsibilities

• Lead information security governance and ISMS management.
• Coordinate ISO 27001 certification and surveillance activities.
• Facilitate ISMS reviews and reporting.
• Monitor security KPIs, corrective actions, and improvement initiatives.
• Ensure regulatory and organizational compliance.
• Perform vendor security risk assessments and due diligence reviews.
• Review security clauses in vendor contracts (MSA, SOW, DPA).
• Advise on security requirements across project lifecycles.
• Coordinate internal and external audits and remediation plans.
• Provide compliance reporting to management.

Skills

Information security

Governance

Risk management

Regulatory compliance

Stakeholder management

Education

Bachelor's or Master's in Information Security

Tools

ISO 27001

Auditing frameworks

Job description

Senior Consultant – Information Security

The Consultant is responsible for leading information security governance, ISMS management, risk management, compliance, third-party security assurance, audit coordination, and security advisory activities across the client organization. The role serves as the primary focal point for ensuring alignment with ISO 27001, UAE PDPL, Dubai ISR, and internal governance requirements. The position partners with business units, IT teams, procurement, legal, HR, project teams, and executive management to ensure security risks are appropriately identified, assessed, managed, and reported. The successful candidate will possess strong governance and risk management expertise while demonstrating practical business understanding and stakeholder management skills.

Key Responsibilities

Information Security Governance & ISMS

• Manage and continuously improve the Information Security Management System (ISMS).
• Maintain information security policies, standards, procedures, and guidelines.
• Coordinate ISO 27001 certification and surveillance activities.
• Facilitate ISMS Management Reviews and reporting.
• Monitor security objectives, KPIs, corrective actions, and improvement initiatives.
• Ensure compliance with regulatory and organizational requirements.

Risk Management

• Conduct information security risk assessments across projects, systems, vendors, and business processes.
• Facilitate risk treatment planning with risk owners.
• Monitor risk mitigation progress and
• Escalate overdue actions.
• Support enterprise risk management activities related to cyber and technology risks.

Third-Party & Vendor Security Risk Management

• Perform vendor security assessments and due diligence reviews.
• Review security clauses in the vendor contractual documentation (MSA, SOW, DPA etc.)
• Work closely with Procurement and Legal teams during contract reviews.
• Evaluate SaaS, cloud, managed service providers, and technology vendors for information security and data privacy.
• Identify security, privacy, confidentiality, and compliance risks.
• Recommend practical risk treatment options.
• Maintain third-party risk registers and remediation actions.

Project Security Advisory

• Participate in project reviews and steering committees.
• Ensure security requirements are addressed throughout project lifecycles.

Audit and Compliance

• Coordinate internal and external audits.
• Act as primary liaison for ISO 27001 audits.
• Maintain evidence repositories.
• Track audit findings and remediation plans.
• Provide compliance reporting to management.

Security Incident Governance

• Participate in governance reviews of information security incidents.
• Support investigations, root cause analysis, and lessons learned activities.
• Assess policy violations and control failures.
• Recommend corrective and preventive actions.

Required Qualifications

Education

• Bachelor's or Master's degree in Information Security, Computer Science, Information Systems, or related discipline.

Experience

• 10+ years of overall experience with minimum 6+ years dedicated to Information Security GRC.
• Hands-on experience implementing and maintaining ISO 27001.
• Experience conducting third-party security assessments.
• Experience reviewing technology contracts and security clauses.
• Experience supporting audits and certification activities.
• Experience engaging with business and executive stakeholders.

Preferred Certifications

• CISSP/CISM/CISA
• CRISC
• ISO 27001 Lead Implementer/ Lead Auditor
• CDPSE
• ISO 22301 Lead Auditor / Implementer