GRC Consultant (5-10 yrs)

Job Description :

- Provide expertise and guidance on GRC frameworks

- Reasonable experience in industry recognized standards & regulations such as ISO 27001, NESA, ADHICS, HiTrust, SOC, and CBUAE

- Support implementation of GRC strategies

- Conduct risk assessments, identify and analyse potential risks to IT systems and operations, and recommend risk mitigation strategies that align with industry standards and best practices.

- Map organizational policies and procedures to relevant security standards and regulatory requirements

- Conduct periodic compliance assessments such as health checks to evaluate the organization's adherence to GRC frameworks and regulatory requirements. Provide actionable insights for improvement where necessary.

- Review, and update company policies to ensure alignment with regulatory obligations and organizational objectives.

- Collaborate with stakeholders across the organization to manage GRC and information security related projects, track progress, and ensure timely delivery.

- Act as a point of contact and maintain clear communication throughout project lifecycles.

- Experience with Archer GRC solution will be considered an advantage.

- Upload policies on Archer and align policy statement with control library

- Involved in compliance reviews, tracking, reporting, dashboard & assurance activities

- Bachelor's degree in information technology or a related field.

- Strong technical risk management background, with the ability to assess risks and develop mitigation strategies.

- Proven ability to manage stakeholders and projects, ensuring that activities are effectively tracked and communicated.

- Strong written and verbal communication skills, with the ability to present complex concepts to stakeholders at all levels.