Information Security Lead – GRC & Assurance

About the role

We are seeking an experienced Information Security Lead to own and drive the Governance, Risk, and Compliance (GRC) and Security Assurance function for a global top‑tier fund based in the UAE. This senior, hands‑on position will work closely with senior security leadership and technical teams across a modern, cloud‑based environment.

Key responsibilities

• Own the organisation's ISO 27001 certification and ISMS, managing audits, certification requirements and continual improvement.
• Lead SOC 2 Type I and Type II programmes, coordinating with external auditors and ensuring successful examinations.
• Oversee security controls, audit evidence, findings and remediation through to completion.
• Provide assurance across cloud environments and support ongoing security governance.
• Help develop and scale the organisation's broader GRC and assurance capabilities.

Required profile

• Significant experience in Information Security, GRC, Security Assurance or IT Audit.
• Strong, demonstrable ownership of ISO 27001 certification and audits.
• Experience leading SOC 2 Type I/II programmes.
• Background in finance, FinTech or regulated financial services (asset management, banking, payments, etc.).
• Ability to work with senior stakeholders and technical teams.

Required skills

• ISO 27001 certification
• SOC 2 Type I & Type II
• Security assurance and GRC tooling
• Cloud environment security
• Understanding of security controls, audit processes and remediation