Senior GRC Consultant/Implementor

About the role

Cyber Shield is looking for a Senior GRC Consultant/Implementor to join its on‑site team in Egypt. You will assess clients' cybersecurity and IT governance posture, design and maintain governance, risk and compliance frameworks, and guide remediation efforts.

Key responsibilities

• Implement and maintain ISMS (ISO/IEC 27001) and BCMS (ISO 22301) frameworks.
• Support AI Governance initiatives aligned with ISO/IEC 42001.
• Conduct risk assessments, gap analyses, control reviews and internal/external audits.
• Ensure compliance with UAE IA Regulation and UAE cybersecurity requirements.
• Develop, document and update policies, procedures and compliance artefacts.
• Prepare reports, dashboards and presentations for stakeholders.
• Coordinate with IT, business owners and process owners to roll out GRC tools and processes.
• Deliver training and awareness sessions on governance and compliance.

Required profile

• Strong knowledge of governance, risk management and compliance methodologies.
• Experience implementing GRC frameworks and controls.
• Familiarity with cybersecurity standards such as ISO 27001, NIST, PCI DSS and local regulations.
• Proven ability to conduct risk assessments, audits and develop remediation plans.
• Excellent analytical, problem‑solving and stakeholder‑management skills.
• Bachelor’s degree in Information Security, Computer Science, Information Systems, Business or related field.
• Relevant certifications (e.g., CISA, CISM, CRISC, ISO 27001 Lead Implementer) are a plus.

Required skills

• ISO/IEC 27001
• ISO/IEC 42001
• ISO 22301
• NIST framework
• PCI DSS
• Risk assessment and gap analysis
• Internal and external audit
• GRC tool implementation