GRC Risk and Compliance Consultant

About the RoleRole Overview We are looking for an experienced GRC Consultant to support clients in establishing, implementing, and improving their Governance, Risk and Compliance programs. The consultant will work with customers across information security governance, risk management, compliance assessments, policy development, audits, regulatory requirements, security frameworks, and implementation of security controls.ResponsibilitiesLead and execute Governance, Risk and Compliance (GRC) consulting engagements.Conduct information security and cybersecurity gap assessments against applicable standards and regulatory requirements.Perform risk assessments, risk identification, risk analysis and risk treatment activities.Develop and maintain: Information Security PoliciesStandards and ProceduresRisk RegistersStatement of Applicability (SoA)Control MatricesBusiness Impact AssessmentsRisk Treatment PlansSupport clients in implementing and improving Information Security Management Systems (ISMS).Conduct compliance assessments against frameworks and standards such as: ISO 27001ISO 22301NIST CSFNIST 800-53CIS ControlsCOBITSOC 2PCI DSSApplicable UAE/GCC regulatory requirementsSupport organizations in ISO 27001 implementation and certification readiness.Perform internal audits and readiness assessments.Identify control gaps and develop practical remediation plans.Support customers during external certification and regulatory audits.Conduct third-party/vendor security risk assessments.Develop and maintain Third-Party Risk Management (TPRM) programs.Support Business Continuity Management and Disaster Recovery assessments where applicable.Review security policies, procedures, processes and technical/organizational controls.Prepare detailed assessment reports, audit reports and management presentations.Provide remediation recommendations and track closure of identified gaps.Conduct periodic risk and compliance reviews.Support regulatory and customer compliance requirements.Participate in customer workshops, management meetings and compliance discussions.Support pre-sales activities including RFP/RFQ responses, solution.QualificationsExperience 5–7 years with significant hands-on experience in GRC ConsultantRequired SkillsSignificant hands-on experience in GRC Consultant