Senior InfoSec GRC Consultant – ISMS & ISO 27001 Expert

Paramount Computer Systems; Dubai; Sur place; AED 300 000 - 420 000; Plein temps

Résumé du poste

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, ISMS, risk management, and compliance, including third-party security assessments and audits.

You will drive security strategies across projects, oversee risk treatment, review vendor security clauses, and provide security advisory across initiatives, with reporting to senior management and stakeholders.

Qualifications

• 10+ years in information security or GRC.
• Bachelor’s or Master’s degree in Information Security, CS, or IS.
• Hands-on with ISO 27001, GRC, risk management, and compliance.

Responsabilités

• Manage and continuously improve the ISMS and information security governance framework.
• Conduct information security risk assessments and manage risk treatment activities.
• Perform third-party/vendor security assessments and due diligence.
• Review security requirements and clauses in vendor contracts.
• Support ISO 27001 audits, certification, and compliance activities.
• Provide security advisory support across projects and business initiatives.
• Monitor security risks, audit findings, and remediation activities.
• Support information security incident governance and corrective actions.
• Coordinate security awareness initiatives and reporting.

Connaissances

ISO 27001

GRC

Risk management

Compliance

Stakeholder management

Executive communication

Formation

Bachelor's or Master's in Information Security/CS/IS

Outils

GRC software

Description du poste

Paramount Computer Systems in Dubai, UAE, is seeking an experienced Information Security GRC Consultant to lead governance, ISMS, risk management, and compliance, including third-party security assessments and audits.

You will drive security strategies across projects, oversee risk treatment, review vendor security clauses, and provide security advisory across initiatives, with reporting to senior management and stakeholders.