Senior Governance, Risk and Compliance Analyst
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Imbono is hiring a Senior GRC Analyst to manage the ISMS, risk register, policy governance, and compliance for ISO 27001 and NIST CSF. The role requires 5-7 years of GRC experience, ISO 27001 Lead Implementer and Lead Auditor certifications, and knowledge of UAE and Angola data protection regulations.
Key Skills for This Role
Responsibilities
- Maintain, update, and continuously improve the ISMS in accordance with ISO/IEC 27001:2022 and NIST CSF 2.0
- Own and maintain the information security risk register; facilitate risk identification and assessment workshops
- Monitor compliance with regulatory regimes and internal security policies; identify and track remediation actions
- Coordinate internal and external ISMS audits; manage findings and corrective action plans
- Conduct third party security assessments for vendors and maintain vendor risk register
- Support data protection activities including ROPA maintenance and DSARs
- Provide GRC support to M365 tenant to tenant migration programme
- Support development and delivery of security awareness training and phishing simulations
- Prepare regular GRC dashboards and management reports
Requirements
- 5 7 years of experience in information security governance, risk, and compliance roles
- Hands on experience implementing and maintaining an ISO/IEC 27001 ISMS
- Experience with NIST CSF as a risk management framework
- Experience with regulatory compliance (UAE PDPL, Angola Lei 22/11, GDPR)
- ISO 27001:2022 Lead Implementer certification required
- ISO 27001:2022 Lead Auditor certification required
- Bachelor's degree in Information Security, Computer Science or related discipline
- Experience with Microsoft 365 compliance tooling (Purview, Compliance Manager, Secure Score) preferred
- CISM, CISA, or CISSP preferred
Full Job Posting
Role Summary
- Senior GRC Analyst responsible for ISMS operation and improvement
- Reports to Head of Information Security
- Covers Dubai (HQ), Angola, and other geographies
Responsibilities
- Maintain, update, and continuously improve the ISMS in accordance with ISO/IEC 27001:2022 and NIST CSF 2.0
- Own and maintain the information security risk register; facilitate risk identification and assessment workshops
- Monitor compliance with regulatory regimes and internal security policies; identify and track remediation actions
- Coordinate internal and external ISMS audits; manage findings and corrective action plans
- Conduct third party security assessments for vendors and maintain vendor risk register
- Support data protection activities including ROPA maintenance and DSARs
- Provide GRC support to M365 tenant to tenant migration programme
- Support development and delivery of security awareness training and phishing simulations
- Prepare regular GRC dashboards and management reports
Experience
- 5 7 years of experience in information security governance, risk, and compliance roles
- Hands on experience implementing and maintaining an ISO/IEC 27001 ISMS
- Experience with NIST CSF as a risk management framework
- Experience with regulatory compliance (UAE PDPL, Angola Lei 22/11, GDPR)
- Experience with Microsoft 365 compliance tooling preferred
- Experience conducting third party security risk assessments
- Experience in financial services, trading, or professional services advantageous
Qualifications
- Bachelor's degree in Information Security, Computer Science or related discipline
- ISO 27001:2022 Lead Implementer certification required
- ISO 27001:2022 Lead Auditor certification required
- CISM, CISA, or CISSP preferred
Skills
- Deep working knowledge of ISO/IEC 27001:2022 requirements and controls
- Practical knowledge of NIST CSF 2.0
- Strong risk assessment methodology skills
- Familiarity with Microsoft Purview Compliance Manager
- Strong written communication and audit ready documentation
- Proficient in SharePoint based document management
- Analytical mindset for translating regulatory requirements into operational programmes
- Proficiency in English required; Portuguese is a significant advantage
Competencies
- Analytical Thinking
- Attention to Detail
- Stakeholder Management
- Communication
- Ownership
- Resilience
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Imbono
Senior Microsoft Security Engineer
Dubai, UAE
Imbono is seeking a Senior Microsoft Security Engineer to own the Microsoft 365 E5 security environment, including identity, endpoint management, Defender suite, Sentinel, and Purview. The role involves designing, deploy
Junior Oil Trader
Dubai, UAE
Imbono seeks a Junior Oil Trader to support senior traders in executing physical and paper transactions in crude oil and refined products. This entry-level front-office role involves market analysis, deal execution, and
Logistics Analyst
Dubai, UAE
Imbono seeks a Logistics Analyst to analyze logistics operations, optimize supply chain processes, and ensure timely delivery of goods. The role involves data analysis, shipment tracking, and coordination with suppliers
Business Development Specialist
Dubai, UAE
Imbono seeks a Business Development Specialist for its Commodities, Oil and Gas team to identify and secure new business opportunities in crude oil, products, and gas sectors. The role involves strategic planning, relati
Business Development Manager
Dubai, UAE
About Us We are Imbono. A leading operator and provider of infrastructure and essential goods and services across emerging markets. There is no other emerging markets player like us. We combine global capital and operati
Market Analyst
Dubai, UAE
We are Imbono. A leading operator and provider of infrastructure and essential goods and services across emerging markets. There is no other emerging markets player like us. We combine global capital and operational expe
Letter of Credit Senior Specialist
Dubai, UAE
We are Imbono. A leading operator and provider of infrastructure and essential goods and services across emerging markets. There is no other emerging markets player like us. We combine global capital and operational expe
Senior Supply Chain and Logistics Manager
Dubai, UAE
We are Imbono. A leading operator and provider of infrastructure and essential goods and services across emerging markets. There is no other emerging markets player like us. We combine global capital and operational expe
Senior Microsoft Security Engineer
Dubai, UAE
Junior Oil Trader
Dubai, UAE
Logistics Analyst
Dubai, UAE
Business Development Specialist
Dubai, UAE
Business Development Manager
Dubai, UAE
Market Analyst
Dubai, UAE
Letter of Credit Senior Specialist
Dubai, UAE
Senior Supply Chain and Logistics Manager
Dubai, UAE