Senior Information Security Consultant

About the role

The Senior Consultant – Information Security will lead governance, risk, compliance and advisory activities across the organization, ensuring alignment with ISO 27001, UAE PDPL, Dubai ISR and internal policies.

Key responsibilities

• Manage and continuously improve the Information Security Management System (ISMS), including policy maintenance and ISO 27001 certification coordination.
• Conduct information security risk assessments for projects, systems, vendors and business processes, and drive risk treatment planning.
• Perform third‑party security assessments, review security clauses in contracts and maintain risk registers.
• Coordinate internal and external audits, act as primary liaison for ISO 27001 audits and track remediation actions.
• Participate in project security reviews, steering committees and incident governance, providing root‑cause analysis and corrective actions.

Required profile

• Bachelor's or Master's degree in Information Security, Computer Science, Information Systems or related field.
• 10+ years of overall experience with at least 6 years dedicated to Information Security GRC.
• Hands‑on experience implementing and maintaining ISO 27001 and supporting audit and certification activities.
• Proven ability to engage with business and executive stakeholders.

Required skills

• ISO 27001 implementation and maintenance
• Information security risk assessment and treatment
• Third‑party security assessment and vendor risk management
• Audit coordination and compliance reporting
• Knowledge of UAE PDPL and Dubai ISR regulatory requirements