Senior Information Security GRC Consultant

About the role

Paramount Computer Systems is seeking a Senior Consultant to lead its Information Security Governance, Risk and Compliance (GRC) program in Dubai. You will own the ISMS, drive risk assessments, and support security advisory across the organisation.

Key responsibilities

• Manage and continuously improve the ISO 27001‑based ISMS and overall security governance framework.
• Conduct information‑security risk assessments, define treatment plans, and monitor remediation.
• Perform third‑party/vendor security assessments and due‑diligence reviews.
• Review and negotiate security clauses in vendor contracts.
• Support ISO 27001 audits, certification, and ongoing compliance activities.
• Provide security advisory for projects and business initiatives.
• Track audit findings, security risks and coordinate corrective actions.
• Assist with incident governance and drive security‑awareness initiatives.

Required profile

• Bachelor’s or Master’s degree in Information Security, Computer Science, Information Systems or related field.
• 10+ years of experience in information‑security GRC, risk management and compliance.
• Proven ability to work with business, IT, procurement, legal and senior management.
• Strong executive‑level communication and stakeholder‑management skills.

Required skills

• ISO 27001 implementation and auditing.
• GRC frameworks and risk‑management processes.
• Security risk assessments and third‑party assessments.

What we offer

• Competitive compensation in AED.
• Opportunity to shape a strategic security function in a fast‑growing organisation.
• Professional development and support for industry certifications.