Lead Consultant – GRC (Governance, Risk & Compliance)

About the role

The Lead Consultant – GRC will own and drive Governance, Risk and Compliance (GRC) and Information Security initiatives for a leading government regulatory entity in the UAE healthcare sector. Reporting to senior leadership, the role sets technical direction, ensures delivery quality, and acts as the primary liaison with clients and regulators.

Key responsibilities

• Lead end‑to‑end delivery of GRC and Information Security workstreams, planning activities, managing risks, dependencies and timelines.
• Develop, implement and continuously improve Information Security policies, standards, procedures and templates aligned with ADHICS and ISO/IEC 27001.
• Own the Information Security Risk Management Programme, driving risk identification, assessment, treatment and monitoring.
• Define and execute compliance initiatives, lead internal and external audits, and track remediation to closure.
• Serve as senior liaison with internal functions, sector stakeholders and regulatory bodies on security matters.
• Guide, review and quality‑assure the work of consultants and junior team members, providing coaching and technical direction.

Required profile

• Minimum 9 years of experience in governance, risk, compliance and Information Security, with a substantial portion in the UAE healthcare sector.
• Bachelor’s degree in IT, Cybersecurity, Computer Science, Risk Management or related field; Master’s degree preferred.
• Demonstrated experience leading GRC workstreams and delivering high‑quality deliverables.

Required skills

• Advanced understanding of GRC processes, control frameworks and risk assessment methods.
• In‑depth knowledge of the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard.
• Proficiency with ISO/IEC 27001 and ISO 31000 implementation and auditing.
• Experience with compliance monitoring practices and information security policy development.