Cyber GRC Analyst

About the Role

We are seeking a Cyber GRC Analyst to join our team in the United Arab Emirates. In this role you will ensure the organization s information security and compliance posture meets regional and international standards. You will work closely with stakeholders to implement, monitor, and enhance Governance, Risk, and Compliance frameworks using leading tools and best practices.

• Conduct regular risk assessments and gap analyses against ISO
  27001, NIST CSF, NCA ECC, and SAMA CSF frameworks
• Develop, update, and maintain policies, procedures, and control matrices
• Configure, manage, and optimize GRC platforms including Service Now, One Trust, and Archer
• Support internal and external audits and regulatory examinations
• Track and report on compliance metrics and risk remediation progress
• Collaborate with IT, legal, and business teams to address compliance issues and remediate findings
• Stay current with UAE regulatory requirements and industry trends, advising on necessary adjustments

• 2-4 years of experience in Cybersecurity GRC or a related role
• Hands‑on experience with ISO
  27001, NIST CSF, NCA ECC, and SAMA CSF frameworks
• Proficiency in configuring and using Service Now GRC, One Trust, and Archer
• Bachelor's degree in Computer Science, Information Security, or a related field
• Strong analytical, communication, and problem‑solving skills
• Ability to work independently and collaborate with cross‑functional teams
• Understanding of UAE regulatory landscape for information security

• Professional certifications such as CISA, CISSP, CRISC, or ISO
  27001 Lead Implementer
• Experience with data privacy regulations and frameworks such as PDPL, GDPR
• Prior exposure to financial services or government sector GRC requirements
• Knowledge of additional GRC platforms or automation tools
• Advanced report writing and presentation skills