Senior Consultant – Information Security (GRC
Role Overview
Leads information security governance, ISMS management, risk management, compliance, third-party security assurance, audit coordination, and security advisory activities.
Partners with business units, IT, Procurement, Legal, HR, project teams, and executives to identify, assess, manage, and report security risks.
Supports alignment with ISO 27001, UAE PDPL, Dubai ISR, and internal governance requirements.
Key Skills for This Role
Full Job Posting
Role overview
Leads information security governance, ISMS management, risk management, compliance, third-party security assurance, audit coordination, and security advisory activities.
Partners with business units, IT, Procurement, Legal, HR, project teams, and executives to identify, assess, manage, and report security risks.
Supports alignment with ISO 27001, UAE PDPL, Dubai ISR, and internal governance requirements.
Governance, risk, and assurance
- Manage and improve the ISMS and maintain information security policies, standards, procedures, and guidelines.
- Coordinate ISO 27001 certification, surveillance, management reviews, security objectives, KPIs, corrective actions, and improvement initiatives.
- Assess information security risks across projects, systems, vendors, and business processes; facilitate treatment and track mitigation.
- Conduct vendor due diligence, review security clauses in contracts, assess technology providers, and maintain third-party risk registers.
- Participate in project reviews and steering committees and ensure security requirements are addressed across project lifecycles.
- Coordinate audits, maintain evidence, track findings and remediation, and provide management compliance reporting.
- Support incident governance, investigations, root-cause analysis, lessons learned, and corrective and preventive actions.
Required qualifications
- Bachelor's or Master's degree in Information Security, Computer Science, Information Systems, or a related discipline.
- 10+ years of overall experience, including at least 6 years dedicated to Information Security GRC.
- Hands-on experience implementing and maintaining ISO 27001.
- Experience conducting third-party security assessments and reviewing technology contracts and security clauses.
- Experience supporting audits and certification activities and engaging business and executive stakeholders.
Preferred certifications
- Preferred certifications include CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor, CDPSE, and ISO 22301 Lead Auditor or Implementer.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Paramount Computer Systems
Security Engineer - GRC/ISMS - ISR
, UAE
The employer is seeking an experienced Security Engineer to manage information security governance, risk, and compliance, including ISMS improvement, vendor assessments, audits, and incident governance. The role requires
Sales Executive (Saudi Nationals)
Riyadh, KSA
Paramount Computer Systems is seeking an early-career Sales Executive to generate leads, build client relationships, and support sales proposals and follow-ups. The role requires fluency in English and 0–1 year of sales
Senior Consultant – Information Security (ISR - DESC)
, UAE
The employer seeks a senior information security consultant to lead governance, ISMS, risk, compliance, vendor assurance, audits, and security advisory work. Candidates need 10+ years of experience, including 6+ years in
Security Engineer - GRC/ISMS
, UAE
The employer is seeking a senior security GRC/ISMS specialist to maintain its information security management system, manage risk, support audits, and advise on project and vendor security. Candidates need a relevant deg
Forti-SOAR Administrator
, UAE
The employer is seeking a FortiSOAR Administrator to manage and optimize a customer’s SIEM/SOAR environment and support SOC operations. The role requires hands-on FortiSOAR and IBM QRadar expertise, along with SIEM/SOAR
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Paramount Computer Systems seeks an experienced Senior Security Architect to design, implement, and govern enterprise security architectures. The role requires strong expertise in NCA ECC compliance, Data Loss Prevention
Security Consultant – AppSec & Penetration Testing.
, QAT
Paramount Computer Systems seeks a Senior Security Consultant to assess application security and penetration-test web, API, Android, and iOS applications. The work includes DevSecOps, secure SDLC, vulnerability analysis,
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA
The employer is seeking a Project Manager to deliver enterprise GRC platform implementations and connect business stakeholders with technical teams. Candidates need 8+ years of overall experience, hands-on experience wit
Security Engineer - GRC/ISMS - ISR
, UAE
Sales Executive (Saudi Nationals)
Riyadh, KSA
Senior Consultant – Information Security (ISR - DESC)
, UAE
Security Engineer - GRC/ISMS
, UAE
Forti-SOAR Administrator
, UAE
Senior Security Engineer (NCA, DLP, Network Security)
Khobar, KSA
Security Consultant – AppSec & Penetration Testing.
, QAT
Project Manager – Enterprise GRC Solution Implementation
Riyadh, KSA