Senior Security GRC & ISMS Lead (ISO 27001, SOC 2)

QatarYello; Dubai International Financial Centre; Vor Ort; AED 450.000 - 750.000; Vollzeit

Zusammenfassung

QatarYello is seeking a seasoned information security and GRC leader to own and advance the ISMS and assurance programmes in a fintech/regulatory environment. You will drive ISO 27001 certification, SOC 2 readiness, and remediation while coordinating with engineering, product, and operations teams to strengthen controls.

Ideal candidates bring 10+ years in information security and a track record of delivering audits, evidence programmes, and compliant security across cloud environments.

Qualifikationen

• At least 10 years' experience across information security or related disciplines.
• Experience in fintech, payments, digital banking, investment, or regulated environments.
• Direct experience leading ISO 27001 certification and ISMS operations.
• Direct experience leading SOC 2 Type I and/or Type II readiness/examinations.
• Track record of implementing controls, evidence programmes and audits with remediation.
• Experience collaborating with engineering, cloud and product teams in cloud environments.
• Practical experience supporting external audits, client diligence and customer security assessments.
• Knowledge of AI governance, AI risks or security assurance.

Aufgaben

• Lead day-to-day security governance, certification and assurance programme.
• Own ISMS, including ISO 27001 certification, surveillance and continual improvement.
• Lead SOC 2 Type I/II readiness and examinations, including control mapping and evidence management.
• Build and maintain security control frameworks, evidence programmes, and remediation processes.
• Work with engineering, product and operations to implement and improve security controls.
• Perform control testing, identify deficiencies and drive remediation to closure.
• Coordinate external audits, due diligence, security questionnaires and assurance requests.
• Develop reporting on certification status, control effectiveness, findings and remediation.
• Improve assurance activities through automation and continuous monitoring.

Kenntnisse

Security governance

ISMS

SOC 2 readiness

Audit coordination

Automation / monitoring

Cloud security

Ausbildung

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

CISA

CRISC

CISM

CISSP

Tools

GRC tooling

Audit management software

Evidence management tools

Jobbeschreibung

QatarYello is seeking a seasoned information security and GRC leader to own and advance the ISMS and assurance programmes in a fintech/regulatory environment. You will drive ISO 27001 certification, SOC 2 readiness, and remediation while coordinating with engineering, product, and operations teams to strengthen controls.

Ideal candidates bring 10+ years in information security and a track record of delivering audits, evidence programmes, and compliant security across cloud environments.