Information Security Consultant​/Expert – GRC UAE

Sharjah, United Arab Emirates

• Information Technology (IT) & Software
• Security & Defence
• Legal & Compliance
• Government & Public Sector
• Banking & Insurance

An Information Security Consultant / Expert opportunity is available in Sharjah, UAE, within a government or regulated environment. The role is focused on Information Security Governance, Risk and Compliance (GRC), including security governance, risk assessments, compliance programs, audits, control reviews, and security initiatives.

The successful candidate will bring extensive information security and GRC experience, with strong knowledge of ISO 27001, NIST, PCI-DSS, NESA/UAE IA Standards, and SIA. The role also involves working with SOC teams, coordinating incident response, assessing third-party security risks, and communicating technical security risks in clear business terms to senior management. It offers opportunities for senior-level professional development, security certification, and continued career growth in information security governance and risk management.

• Lead and support information security governance and GRC activities.
• Conduct information security and technology risk assessments.
• Perform security control reviews and compliance assessments.
• Support and coordinate security audits and compliance programs.
• Apply relevant security frameworks and standards, including ISO 27001, NIST, PCI-DSS, NESA/UAE IA Standards, and SIA.
• Coordinate incident response activities with SOC and security operations teams.
• Conduct third-party and vendor security risk assessments.
• Assess and document security risks and recommend appropriate controls.
• Translate complex technical security risks into clear business terms for senior management.
• Support security-related change management processes.
• Contribute to information security initiatives and continuous improvement programs.
• Support cloud security governance across Azure, AWS, or GCP environments where applicable.

• 12-15+ years of experience in Information Security, with strong GRC expertise.
• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Master's degree is an advantage.
• 15+ years of experience with a Bachelor's degree or 12+ years with a Master's/Doctorate.
• Strong knowledge of ISO 27001, NIST, PCI-DSS, NESA/UAE IA Standards, and SIA.
• Experience in risk assessments, control reviews, security audits, and compliance programs.
• Experience coordinating incident response and working with SOC teams.
• Strong third-party and vendor security risk assessment experience.
• Ability to communicate technical security risks to senior management.
• CISSP, CISM, or CRISC certification.
• ISO 27001 Lead Auditor or Lead Implementer certification.
• CISA, CEH, or relevant cloud security certifications are advantageous.
• UAE government, semi-government, banking, or regulated financial-sector experience is advantageous.
• Familiarity with Azure, AWS, or GCP security is preferred.
• Knowledge of security-related change management is beneficial.
• Notice period:
  Immediate to 30 days.

Salary and compensation details were not provided by the employer and therefore are not listed.

The position offers opportunities for:

• Senior-level professional development in information security GRC.
• Advanced exposure to UAE information security and regulatory frameworks.
• Continued development of governance, risk, audit, and compliance expertise.
• Professional certification development, including CISSP, CISM, CRISC, ISO 2701, and related certifications.
• Exposure to government and regulated-environment security programs.
• Career progression into senior information security, GRC, risk, and security leadership roles.