Senior Information Security GRC Consultant

Paramount Computer Systems; Abu Dhabi; On-site; AED 320,000 - 520,000; Full time

Job summary

Paramount Computer Systems in Abu Dhabi seeks a Senior Consultant – Information Security to lead governance, ISMS, risk and compliance initiatives. You will partner with business units, IT, procurement, legal, HR, and leadership to align security with ISO 27001 and UAE PDPL requirements.

You will drive third‑party risk assessments, contract reviews, audit coordination, and security advisory across the organization, ensuring effective risk management and reporting.

Qualifications

• Bachelor’s or Master’s degree in Information Security, CS, IS, or related field.
• 10+ years overall experience with at least 6+ years in Information Security GRC.
• Hands-on ISO 27001 implementation experience.
• Experience conducting third-party security assessments.
• Experience reviewing technology contracts and security clauses.
• Experience supporting audits and certification activities.
• Experience engaging with business and executive stakeholders.

Responsibilities

• Lead information security governance and ISMS management.
• Coordinate ISO 27001 certification and surveillance activities.
• Facilitate ISMS reviews and reporting.
• Monitor security KPIs, corrective actions, and improvement initiatives.
• Ensure regulatory and organizational compliance.
• Perform vendor security risk assessments and due diligence reviews.
• Review security clauses in vendor contracts (MSA, SOW, DPA).
• Advise on security requirements across project lifecycles.
• Coordinate internal and external audits and remediation plans.
• Provide compliance reporting to management.

Skills

Information security

Governance

Risk management

Regulatory compliance

Stakeholder management

Education

Bachelor's or Master's in Information Security

Tools

ISO 27001

Auditing frameworks

Job description

Paramount Computer Systems in Abu Dhabi seeks a Senior Consultant – Information Security to lead governance, ISMS, risk and compliance initiatives. You will partner with business units, IT, procurement, legal, HR, and leadership to align security with ISO 27001 and UAE PDPL requirements.

You will drive third‑party risk assessments, contract reviews, audit coordination, and security advisory across the organization, ensuring effective risk management and reporting.