Cyber GRC Analyst

About the role

We are looking for a Cyber GRC Analyst to join our team in the United Arab Emirates. In this role you will ensure that our information security and compliance posture aligns with regional and international standards, working closely with IT, legal and business stakeholders.

Key responsibilities

• Conduct regular risk assessments and gap analyses against ISO 27001, NIST CSF, NCA ECC and SAMA CSF frameworks.
• Develop, update and maintain security policies, procedures and control matrices.
• Configure, manage and optimise GRC platforms such as ServiceNow, OneTrust and Archer.
• Support internal and external audits and regulatory examinations.
• Track, report and drive remediation of compliance metrics and risk findings.
• Collaborate with cross‑functional teams to address compliance issues and stay current with UAE regulatory requirements.

Required profile

• 2–4 years of experience in cybersecurity GRC or a related role.
• Hands‑on experience with ISO 27001, NIST CSF, NCA ECC and SAMA CSF frameworks.
• Proficiency in configuring and using ServiceNow GRC, OneTrust and Archer.
• Bachelor’s degree in Computer Science, Information Security or a related field.
• Strong analytical, communication and problem‑solving abilities.
• Ability to work independently and as part of cross‑functional teams.
• Understanding of the UAE regulatory landscape for information security.

Required skills

• ISO 27001 framework
• NIST CSF framework
• NCA ECC framework
• SAMA CSF framework
• ServiceNow GRC platform
• OneTrust platform
• Archer platform