Policy & Compliance Expert / GRC Architect

Role overview

Required experience

• 12+ years of experience in information security with a good understanding of the data protection domain.
• Experience in security risk management, compliance and data privacy audits, reviews, gap assessments, and implementation.
• Experience developing and implementing enterprise security strategies, governance frameworks, standards, and policies.
• Ability to conduct Data Protection Impact Assessments.
• Good understanding of access management and the ability to evaluate RBAC, ABAC, or blended approaches.
• Conversance with ISO 27001, NIST, COBIT, GDPR, SOX, and PCI-DSS.

Preferred background

• Experience in the UAE or Middle East is preferred, with exposure to UAE PDPL and NESA regulations.
• Experience in highly regulated defence environments is preferred.
• Certifications such as CISSP, CISA, CISM, CEH, and ISO 27001 implementation are preferred.

Responsibilities

• Deliver GRC consultancy services in customer-facing engagements.
• Develop security strategies, frameworks, policies, assessments, and solutions with customer teams.
• Lead implementation of GRC deliverables at customer locations.
• Conduct security risk management, compliance, and data privacy audits, reviews, and gap assessments.
• Develop and implement enterprise security strategies, governance frameworks, standards, and policies.
• Conduct Data Protection Impact Assessments and evaluate access management approaches.

Compensation

• Pay is AED 25,000 to AED 32,000 per month.

Work location

• Work location is in person.