Consultant GRC – Cyber Consulting Services

About the role

The Consultant – Cyber Consulting Services will support the delivery, implementation, and monitoring of Governance, Risk and Compliance (GRC) and Information Security initiatives for a leading government regulatory entity and its regulated sector in Abu Dhabi.

Key responsibilities

• Develop, implement and maintain Information Security policies, standards, procedures and templates aligned with ADHICS and ISO/IEC 27001.
• Execute compliance management activities, gather evidence, assess controls and document compliance against applicable standards.
• Conduct risk assessments, maintain risk registers and track treatment actions for the organization and its regulated sector.
• Support internal and external Information Security audits by preparing documentation, collating evidence and tracking findings to closure.
• Coordinate with business functions, sector stakeholders and regulatory bodies on security matters, deviations, exemptions and incidents.
• Prepare and maintain GRC documentation, trackers and reports, and report progress to senior consultants and the engagement lead.

Required profile

• Minimum 5 years of experience in governance, risk, compliance and Information Security.
• Relevant experience within the UAE healthcare sector or a healthcare regulatory environment.
• Bachelor's degree in IT, Cybersecurity, Computer Science, Risk Management, Business Administration or related field.

Required skills

• Working understanding of GRC processes, control frameworks and risk assessment methods.
• Familiarity with the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard.
• Certifications: ISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC, CISA, CISSP, ISO/IEC 27001 Foundation, CompTIA Security+.