استشاري حوكمة ومخاطر والتزام (GRC)

About the Role

Role Overview We are looking for an experienced GRC Consultant to support clients in establishing, implementing, and improving their Governance, Risk and Compliance programs. The consultant will work with customers across information security governance, risk management, compliance assessments, policy development, audits, regulatory requirements, security frameworks, and implementation of security controls.

Responsibilities

• Lead and execute Governance, Risk and Compliance (GRC) consulting engagements.
• Conduct information security and cybersecurity gap assessments against applicable standards and regulatory requirements.
• Perform risk assessments, risk identification, risk analysis and risk treatment activities.
• Develop and maintain:
• Information Security Policies
• Standards and Procedures
• Risk Registers
• Statement of Applicability (SoA)
• Control Matrices
• Business Impact Assessments
• Risk Treatment Plans

• Support clients in implementing and improving Information Security Management Systems (ISMS).
• Conduct compliance assessments against frameworks and standards such as:
• ISO 27001
• ISO 22301
• NIST CSF
• NIST 800-53
• CIS Controls
• COBIT
• SOC 2
• PCI DSS
• Applicable UAE/GCC regulatory requirements

• Support organizations in ISO 27001 implementation and certification readiness.
• Perform internal audits and readiness assessments.
• Identify control gaps and develop practical remediation plans.
• Support customers during external certification and regulatory audits.
• Conduct third-party/vendor security risk assessments.
• Develop and maintain Third-Party Risk Management (TPRM) programs.
• Support Business Continuity Management and Disaster Recovery assessments where applicable.
• Review security policies, procedures, processes and technical/organizational controls.
• Prepare detailed assessment reports, audit reports and management presentations.
• Provide remediation recommendations and track closure of identified gaps.
• Conduct periodic risk and compliance reviews.
• Support regulatory and customer compliance requirements.
• Participate in customer workshops, management meetings and compliance discussions.
• Support pre-sales activities including RFP/RFQ responses, solution.

Qualifications

• Experience 5–7 years with significant hands-on experience in GRC Consultant

Required Skills

• Significant hands-on experience in GRC Consultant