Senior Consultant – Information Security (ISR)

About the role

The Consultant leads information security governance, ISMS management, risk management, compliance, third-party security assurance, audit coordination and security advisory across the client organisation. As the main focal point for alignment with ISO 27001, UAE PDPL, Dubai ISR and internal governance requirements, the role works with business units, IT, procurement, legal, HR, project teams and executive management to identify, assess, manage and report on security risks.

Key responsibilities

• Manage and improve the ISMS, maintain policies, standards, procedures and guidelines, coordinate ISO 27001 certification and surveillance, run management reviews and monitor objectives, KPIs and corrective actions
• Carry out information security risk assessments, support risk treatment planning and enterprise cyber and technology risk management
• Perform vendor security assessments and due diligence, review security clauses in contracts (MSA, SOW, DPA) with Procurement and Legal, and maintain third-party risk registers
• Take part in project reviews and steering committees so security requirements are met throughout project lifecycles
• Coordinate internal and external audits, act as the main liaison for ISO 27001 audits, track findings and remediation plans, and provide compliance reporting
• Support incident governance, investigations, root cause analysis and lessons learned, and recommend corrective and preventive actions

Required profile

• Bachelor's or Master's degree in Information Security, Computer Science, Information Systems or a related field
• 10+ years of overall experience, with at least 6 years dedicated to Information Security GRC
• Hands-on experience implementing and maintaining ISO 27001, conducting third-party security assessments, reviewing technology contracts and supporting audits and certification
• Experience engaging with business and executive stakeholders

Preferred certifications

• CISSP, CISM, CISA, CRISC
• ISO 27001 Lead Implementer / Lead Auditor, ISO 22301 Lead Auditor / Implementer, CDPSE