Senior Information Security & Third-Party Risk Consultant

Dicetek LLC; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

Dicetek LLC is seeking an experienced information security professional to lead third-party risk management initiatives in Dubai. The role focuses on assessing security posture, regulatory alignment, and contractual risk across our vendor ecosystem.

Responsibilities include deploying TPRM frameworks, evaluating SOC and penetration test results, and defining security requirements for vendor engagements to ensure ongoing protection and compliance.

Qualifications

• 5-8 years of experience in Information Security, Cybersecurity, IT Risk, or Third-Party Risk Management.
• Strong knowledge of TPRM / Vendor Risk Management.
• Familiarity with ISO 27001, NIST, CIS Controls, and COBIT.
• Understanding of cloud security, data privacy, IAM, network security, vulnerability management, and BC.

Responsibilities

• Develop and implement robust third-party risk management (TPRM) frameworks, policies and procedures.
• Conduct risk assessments of vendors evaluating security posture, compliance, and resilience.
• Analyze vendor security docs including SOC reports, pen tests, and privacy policies to quantify risks.
• Define and manage security requirements and contractual clauses for third-party engagements.

Skills

TPRM / Vendor Risk Management

Cloud Security

GRC & Risk Assessment

Stakeholder Management

Security Documentation Analytics

Tools

GRC tools

Job description

Dicetek LLC is seeking an experienced information security professional to lead third-party risk management initiatives in Dubai. The role focuses on assessing security posture, regulatory alignment, and contractual risk across our vendor ecosystem.

Responsibilities include deploying TPRM frameworks, evaluating SOC and penetration test results, and defining security requirements for vendor engagements to ensure ongoing protection and compliance.