Senior GRC Consultant – Information Security

Key ResponsibilitiesAct as the product owner for compliance, audit, risk, findings, Corrective and Preventive Actions (CAPA), and exemption management modules.Translate ADHICS, UAE IA Standard, and ISO/IEC 27001:2022 requirements into platform controls, sub-controls, questionnaires, scoring models, and audit workpapers.Define and maintain compliance control mappings, risk assessment frameworks, and regulatory requirements.Conduct requirements workshops with information security, audit, and licensing teams.Design evidence requirements, audit findings rules, and CAPA workflows.Ensure platform configurations align with applicable regulatory and compliance requirements.Support User Acceptance Testing (UAT), regulatory validation, and sector-wide platform rollout.Qualifications10+ years of experience in Information Security Governance, Risk & Compliance (GRC).Mandatory hands-on ADHICS experience, including assessments, audits, or implementation within UAE healthcare or government sectors.Strong knowledge of UAE IA Standard and ISO/IEC 27001:2022.Experience implementing or configuring an Enterprise GRC (EGRC) platform.Expertise in compliance assessments, risk management, audit management, control mapping, and CAPA processes.Experience working with government or regulated-sector stakeholders.ISO/IEC 27001 Lead Auditor certification (Required).CISA certification or CRISC/CISM (Required).Fluency in Arabic and English (Mandatory).