Information Security GRC

About the Role:

We are seeking a seasoned Information Security GRC professional to join our Dubai office. In this role, you will drive the development and execution of governance, risk management, and compliance initiatives that protect our information assets and ensure adherence to regulatory and industry standards. You will collaborate with cross-functional teams, influence senior stakeholders, and continuously enhance our security posture.

Responsibilities:

• Develop, implement, and maintain information security governance frameworks, policies, and procedures aligned with ISO 27001, NIST CSF, and regional regulations.
• Conduct regular risk assessments and gap analyses, and coordinate remediation activities with IT and business units.
• Lead and support internal and external audits, track findings, and drive closure of compliance issues.
• Monitor changes in local and international data protection and cybersecurity regulations and ensure organizational readiness.
• Collaborate with stakeholders to integrate security controls into projects, systems, and processes throughout the SDLC.
• Design and deliver security and compliance awareness training programs for staff and management.
• Prepare and present regular reports on risk posture, compliance status, and key metrics to senior leadership.
• Manage third-party and vendor security risk assessments, due diligence, and ongoing monitoring.