Policy & Compliance Expert

Position - Policy & Compliance Expert / GRC ArchitectGRC Architect profile with 12+ years of experience in Information security with good understanding of Data Protection domainPreferably someone who has worked in UAE or Middle East with exposure to UAE PDPL, NESA regulations. Experience of working in highly regulated defence environments.Played a role in the delivery of GRC consultancy services, customer facing.Working closely with Customer’s team to develop GRC deliverables (Security Strategy / Frameworks / Policies / Assessments / Solutions etc) and lead their implementation either at customer location.Must have experience in Security Risk Management, Compliance and Data privacy - Audits, Reviews, Gap assessment and implementation.Developing and implementing Enterprise Security Strategy, Governance Frameworks, Standards, Policies (e.g. Conversant in ISO27001, NIST, COBIT, GDPR, SOX, PCI-DSS etc)Ability to conduct Data Protection Impact Assessments (DPIA)Good understanding of access management with ability to evaluate and recommend RBAC, ABAC or blended approach suitability