GRC Consultant – Cyber Consulting Services

About the role

The Consultant – Cyber Consulting Services will support the delivery, implementation, and monitoring of Governance, Risk and Compliance (GRC) and Information Security initiatives for a leading government regulatory entity and its regulated sector, operating within a healthcare regulatory environment in Abu Dhabi.

Key responsibilities

• Support development, implementation, and maintenance of Information Security policies, standards, procedures, and guidelines aligned with ADHICS and ISO/IEC 27001.
• Execute compliance management activities, gather evidence, assess operational capabilities, and document control effectiveness against regulatory requirements.
• Conduct risk assessments, maintain risk registers, and track treatment actions as part of the Information Security Risk Management Program.
• Assist with internal and external audits by preparing documentation, collating evidence, and tracking findings to closure.
• Coordinate with business functions, sector stakeholders, and regulatory bodies on security matters, deviations, exemptions, and incidents.

Required profile

• Minimum 5 years experience in governance, risk, compliance, and information security, with exposure to UAE healthcare regulatory environment.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, Risk Management, Business Administration or related field.
• Familiarity with ADHICS Standard and UAE healthcare information security requirements.

Required skills

• Working understanding of GRC processes, control frameworks, risk assessment methods and compliance monitoring practices.
• Knowledge of ADHICS Standard and ISO/IEC 27001.