Manager - Cyber Consulting Services (GRC Compliance)

About the role

The Manager - GRC Services (Compliance) leads the delivery of regulatory compliance advisory engagements, helping clients build, assess and strengthen their compliance frameworks, including regulatory compliance and data protection and conduct compliance programmes. Reporting to the Director - GRC Services, the role manages engagement teams, acts as a key client contact and supports the growth of the compliance proposition while ensuring high-quality, regulation-aligned delivery.

Key responsibilities

• Plan and deliver compliance advisory engagements, including compliance framework design, regulatory gap assessments, policy and procedure development and compliance monitoring programmes.
• Assess client compliance against applicable laws and regulations (e.g. Central Bank of the UAE, SCA, DFSA/DIFC, FSRA/ADGM, data-protection regulations) and international standards.
• Design and implement compliance governance structures, risk assessments, controls and reporting mechanisms.
• Manage engagement scope, budgets, timelines, quality and deliverables, escalating matters to the Director where required.
• Serve as primary contact for compliance and risk stakeholders in client organisations and communicate regulatory requirements clearly and practically.
• Lead, review and develop the work of consultants and analysts; allocate resources across multiple concurrent engagements.
• Support proposals, scoping and pricing, identify follow-on work and monitor regulatory developments to turn them into client opportunities.
• Lead and develop a team of assessors and GRC analysts, including coaching, calibration and quality reviews, and maintain training, certification and inter-rater reliability programmes.

Required profile

• Minimum 7 years of relevant compliance experience, including consulting, advisory, regulator or in-house compliance environments.
• Minimum 2 years managing compliance engagements and teams end to end.
• Demonstrated experience designing compliance frameworks and conducting regulatory gap assessments.
• Experience advising on or supporting national or sector-wide cyber governance and compliance programmes (such as the National Cybersecurity Index Program) is strongly preferred.
• Bachelor's degree in Cybersecurity, Information Security, Risk Management or a related field; Master's degree preferred.

Required skills

• GRC and compliance platforms (e.g. ServiceNow GRC, RSA Archer or equivalent)
• Reporting and BI tools (e.g. Power BI, Tableau) and advanced Excel for compliance reporting
• Microsoft 365 or equivalent productivity suites
• Project and engagement management, client relationship management and team leadership