GRC Consultant
Infosec Arabia Company Information Systems · Not specified · hybrid · Posted 23d ago
Undisclosed6–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Role & responsibilities
- Conducting cyber and information security risk assessments
- Developing and maintaining security governance frameworks
- Supporting ISO 27001, ISO 22301 and other certification programmes
- Assessing security controls against regulatory and industry requirements
- Maintaining risk registers and supporting risk treatment activities
- Developing information security policies, standards and procedures
- Supporting internal and external security audits
- Conducting third-party and supplier security risk assessments
- Providing guidance on regulatory and compliance requirements
- Supporting operational resilience and business continuity activities
- Producing risk, assurance and compliance reporting for senior stakeholders
- Working with technology and security teams to improve control effectiveness
Preferred candidate profile
- Governance, Risk and Compliance
- Cyber Security Governance
- Information Security
- Cyber Risk Management
- Security Assurance
- Regulatory Compliance
- ISO 27001
- ISO 22301
- ISO 20001
- NIST Cybersecurity Framework
- Cyber Essentials and Cyber Essentials Plus
- PCI DSS
- GDPR
- Risk Assessments
- Security Controls
- Policy Development
- Audit and Assurance
- Third-Party Risk Management
- Operational Resilience
- Business Continuity
- Security Frameworks
- Stakeholder Management
Sourced from naukri
Skills
Information Security Consultingdata privacyIT Risk ManagementCisagrcIT GovernanceISO ImplementationISOnistpci dssrisk governanceInformation Security