Lead Consultant – Governance, Risk & Compliance

About the role

The Lead Consultant – GRC is a senior individual contributor responsible for defining, enforcing and monitoring Governance, Risk and Compliance and Information Security initiatives for a government regulatory entity in the UAE healthcare sector.

Key responsibilities

• Own and lead end‑to‑end delivery of GRC and Information Security workstreams, acting as senior point of contact with client and regulators.
• Develop, implement and continuously improve security policies, standards, procedures and templates aligned to ADHICS and ISO/IEC 27001.
• Lead the Information Security Risk Management program, driving risk identification, assessment, treatment and monitoring.
• Define and execute compliance initiatives, conduct audits and track findings to closure.
• Serve as senior liaison with internal functions, sector stakeholders and regulatory bodies on security matters.
• Guide, review and quality‑assure the work of consultants and junior staff, providing technical direction and mentorship.

Required profile

• Minimum 9 years of experience in governance, risk, compliance and information security, with a substantial portion in UAE healthcare or regulatory environments.
• Bachelor’s degree in IT, cybersecurity, risk management or related field; Master’s preferred.
• Proven ability to lead GRC workstreams and quality‑assure deliverables without full line‑management responsibility.

Required skills

• Advanced understanding of GRC processes, control frameworks and compliance monitoring.
• In‑depth knowledge of the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard.
• Experience with ISO/IEC 27001, ISO 31000, risk assessment and information security audits.
• Strong analytical, stakeholder management and communication abilities.