Senior InfoSec GRC Consultant (UAE)

Dautom; United Arab Emirates; On-site; AED 180,000 - 300,000; Full time

Job summary

Dautom in Sharjah, United Arab Emirates, seeks an Information Security Consultant with 12-15+ years of information security experience and strong GRC expertise to lead governance, risk assessments, compliance programs, and audits within a government or regulated environment.

The role requires deep knowledge of ISO 27001, NIST, PCI-DSS, UAE IA standards, and SIA, with experience coordinating incident response with SOC teams and communicating security risks to senior management.

Qualifications

• 12-15+ years of information security experience with strong GRC expertise.
• Bachelor's degree in Computer Science or Information Systems; Master's degree advantageous.
• Certifications such as CISSP, CISM, CRISC are expected or advantageous.

Responsibilities

• Lead information security governance and GRC activities.
• Conduct information security and technology risk assessments.
• Perform security control reviews and compliance assessments.
• Coordinate security audits and compliance programs with SOC and security operations teams.
• Apply ISO 27001, NIST, PCI-DSS, UAE IA Standards, and SIA frameworks.
• Translate security risks into clear business terms for senior management.
• Support cloud security governance across Azure, AWS, or GCP where applicable.

Skills

GRC expertise

Security governance

Stakeholder communication

SOC coordination

Education

Bachelor's degree in CS/IS

Master's degree (advantage)

Tools

ISO 27001

NIST

PCI-DSS

NESA/UAE IA Standards

SIA

Job description

Dautom in Sharjah, United Arab Emirates, seeks an Information Security Consultant with 12-15+ years of information security experience and strong GRC expertise to lead governance, risk assessments, compliance programs, and audits within a government or regulated environment.

The role requires deep knowledge of ISO 27001, NIST, PCI-DSS, UAE IA standards, and SIA, with experience coordinating incident response with SOC teams and communicating security risks to senior management.