Cybersecurity Governance, Risk & Compliance (GRC) Specialist
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
ProofOps seeks a Cybersecurity GRC Specialist to lead governance, risk management, and compliance initiatives. The role involves implementing security frameworks, conducting risk assessments, and managing audits.
Key Skills for This Role
Responsibilities
- Develop, implement, and maintain cybersecurity governance programs
- Establish and manage Information Security Management Systems (ISMS)
- Support implementation and maturity assessments for security frameworks
- Develop cybersecurity policies, procedures, standards, and guidelines
- Conduct enterprise cybersecurity risk assessments
- Perform risk identification, analysis, treatment, and reporting
- Maintain organizational risk registers and risk treatment plans
- Facilitate business impact assessments and control effectiveness reviews
- Present risk findings and recommendations to management and clients
- Conduct compliance gap assessments and readiness reviews
- Support internal and external audits
- Coordinate evidence collection and remediation activities
Requirements
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field
- 4–8 years of experience in Cybersecurity Governance, Risk & Compliance
- Experience conducting risk assessments and compliance audits
- Hands on experience implementing security governance frameworks
- Strong working knowledge of ISO 27001, NIST CSF, NIST 800 53, CIS Controls, PCI DSS, GDPR, SOC 2, UAE Cybersecurity Regulations
- Preferred certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CISA, PCI DSS ISA/QSA, CCSK or CCSP
Full Job Posting
Role Overview
- We are seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) Specialist to lead and support cybersecurity governance initiatives, risk management programs, compliance assessments, and security framework implementation across client environments.
- The ideal candidate will possess strong knowledge of cybersecurity standards, regulatory requirements, risk assessment methodologies, and information security governance practices.
- This role will work closely with clients, technical teams, and business stakeholders to ensure cybersecurity risks are effectively managed and compliance obligations are met.
Key Responsibilities
- Develop, implement, and maintain cybersecurity governance programs.
- Establish and manage Information Security Management Systems (ISMS).
- Support implementation and maturity assessments for frameworks such as ISO 27001, NIST CSF, NIST 800 53, CIS Controls, PCI DSS, GDPR, UAE Information Assurance Standards, NIS2.
- Develop cybersecurity policies, procedures, standards, and guidelines.
- Conduct enterprise cybersecurity risk assessments.
- Perform risk identification, analysis, treatment, and reporting.
- Maintain organizational risk registers and risk treatment plans.
- Facilitate business impact assessments and control effectiveness reviews.
- Present risk findings and recommendations to management and clients.
- Conduct compliance gap assessments and readiness reviews.
- Support internal and external audits.
- Coordinate evidence collection and remediation activities.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
- 4–8 years of experience in Cybersecurity Governance, Risk & Compliance.
- Experience conducting risk assessments and compliance audits.
- Hands on experience implementing security governance frameworks.
- Experience working within consulting, MSSP, SOC, or cybersecurity service environments is preferred.
- Strong working knowledge of ISO 27001 / ISO 27002, NIST CSF, NIST 800 53, CIS Controls, PCI DSS, GDPR, SOC 2, UAE Cybersecurity Regulations, Cloud Security Governance (AWS, Azure, GCP).
- One or more of the following certifications are highly desirable: CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, PCI DSS ISA/QSA, CCSK or CCSP.
Key Competencies
- Excellent analytical and problem solving skills
- Strong stakeholder management abilities
- Executive level communication and presentation skills
- Risk based decision making mindset
- Strong documentation and reporting capabilities
- Ability to manage multiple client engagements simultaneously
- High attention to detail and compliance requirements
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at ITHR Technologies Consulting LLC
Head of Sales – Enterprise SaaS / AI Video Platform
Dubai, UAE
ITHR is seeking an experienced Head of Sales to lead global revenue growth for its AI-native video infrastructure platform. The role involves defining sales strategy, driving enterprise customer acquisition, building str
HR Administrator
Dubai, UAE
Blinklink, an AI-powered enterprise video platform, seeks an HR Administrator in Dubai to support HR operations including employee records, recruitment, onboarding, payroll, and compliance. The ideal candidate has 2-5 ye
Senior SOC Analyst
Dubai, UAE
Senior SOC Analyst (Cyber Security) About The Job ithr technologies is a cybersecurity services company helping organizations across the UAE and Middle East strengthen their security posture through practical, outcome-dr
Oracle Fusion EPM Consultant
Dubai, UAE
Job Title: Oracle Fusion EPM Consultant Location: Dubai, UAE Employment Type: Full-Time Industry: IT / Consulting About The Role We are seeking an experienced Oracle Fusion EPM Consultant to join our delivery team. The i
Enterprise Account Manager - Cybersecurity
Dubai, UAE
Enterprise Account Manager Cybersecurity Job Summary We are seeking an experienced Enterprise Account Manager with a proven track record in the UAE technology market , specifically in IT Infrastructure and Cybersecurity
Head of Sales – Enterprise SaaS / AI Video Platform
Dubai, UAE
HR Administrator
Dubai, UAE
Senior SOC Analyst
Dubai, UAE
Oracle Fusion EPM Consultant
Dubai, UAE
Enterprise Account Manager - Cybersecurity
Dubai, UAE