Summary

Paramount Computer Systems is seeking a Senior Information Security Consultant in Abu Dhabi. The role leads information security governance, ISMS management, risk assessments, vendor security reviews, audit coordination, and security advice across client organizations. The successful candidate will have 10 or more years of overall experience, including at least six years in Information Security GRC, and hands-on experience implementing and maintaining ISO 27001. A relevant bachelor’s or master’s degree is required; CISSP, CISM, CISA, CRISC, ISO 27001, CDPSE, or ISO 22301 certifications are preferred.

The posting

As published on paramountassure.com. Pulled from the employer's site and shown as they wrote it.

Senior Consultant – Information Security

The Consultant is responsible for leading information security governance, ISMS management, risk management, compliance, third-party security assurance, audit coordination, and security advisory activities across the client organization. The role serves as the primary focal point for ensuring alignment with ISO 27001, UAE PDPL, Dubai ISR, and internal governance requirements. The position partners with business units, IT teams, procurement, legal, HR, project teams, and executive management to ensure security risks are appropriately identified, assessed, managed, and reported. The successful candidate will possess strong governance and risk management expertise while demonstrating practical business understanding and stakeholder management skills.

Key Responsibilities

Information Security Governance & ISMS

Manage and continuously improve the Information Security Management System (ISMS).
Maintain information security policies, standards, procedures, and guidelines.
Coordinate ISO 27001 certification and surveillance activities.
Facilitate ISMS Management Reviews and reporting.
Monitor security objectives, KPIs, corrective actions, and improvement initiatives.
Ensure compliance with regulatory and organizational requirements.

Risk Management

Conduct information security risk assessments across projects, systems, vendors, and business processes.
Facilitate risk treatment planning with risk owners.
Monitor risk mitigation progress and escalate overdue actions.
Support enterprise risk management activities related to cyber and technology risks.

Third-Party & Vendor Security Risk Management

Perform vendor security assessments and due diligence reviews.
Review security clauses in the vendor contractual documentation (MSA, SOW, DPA etc.)
Work closely with Procurement and Legal teams during contract reviews.
Evaluate SaaS, cloud, managed service providers, and technology vendors for information security and data privacy.
Identify security, privacy, confidentiality, and compliance risks.
Recommend practical risk treatment options.
Maintain third-party risk registers and remediation actions.

Project Security Advisory

Participate in project reviews and steering committees.
Ensure security requirements are addressed throughout project lifecycles.

Audit and Compliance

Coordinate internal and external audits.
Act as primary liaison for ISO 27001 audits.
Maintain evidence repositories.
Track audit findings and remediation plans.
Provide compliance reporting to management.

Security Incident Governance

Participate in governance reviews of information security incidents.
Support investigations, root cause analysis, and lessons learned activities.
Assess policy violations and control failures.
Recommend corrective and preventive actions.

Required Qualifications

Education

Bachelor's or Master's degree in Information Security, Computer Science, Information Systems, or related discipline.

Experience

10+ years of overall experience with minimum 6+ years dedicated to Information Security GRC.
Hands-on experience implementing and maintaining ISO 27001.
Experience conducting third-party security assessments.
Experience reviewing technology contracts and security clauses.
Experience supporting audits and certification activities.
Experience engaging with business and executive stakeholders.

Preferred Certifications

CISSP/CISM/CISA
CRISC
ISO 27001 Lead Implementer/ Lead Auditor
CDPSE
ISO 22301 Lead Auditor / Implementer

Similar jobs

SOC Analyst, Level 2
CyberGateAbu DhabiVerified source
CyberGate is seeking a Level 2 SOC Analyst in Abu Dhabi to investigate complex security incidents and lead incident response, including containment, eradication, and recovery. The role includes threat hunting, root cause analysis, and improving SIEM rules, alerts, and response playbooks using Splunk and IBM QRadar.…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.
Digital Forensics and Incident Response Analyst
CyberGateAbu DhabiVerified source
CyberGate is seeking a Digital Forensics and Incident Response Analyst in Abu Dhabi. The role covers incident response from detection through recovery, forensic investigations, evidence preservation, threat analysis, and incident reporting. The analyst will help develop response processes and playbooks, collaborate…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.
Senior SOC Specialist (L3)
CyberGateAbu DhabiVerified source
CyberGate is hiring a Senior SOC Specialist (L3) in Abu Dhabi to lead and mentor SOC analysts and act as the escalation point for complex security incidents. The role covers incident response, threat intelligence, threat hunting, vulnerability assessments, penetration testing, and improving security monitoring tools…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.
Red Teaming Specialist
CyberGateAbu DhabiVerified source
CyberGate Defense is seeking an experienced Red Teaming Specialist for its offensive security team in Abu Dhabi, UAE. The role involves designing and leading internal and external red team engagements, testing enterprise defenses, and assessing web and mobile applications. Candidates should have at least five years of…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.
Detection Engineer
CyberGateAbu DhabiVerified source
CyberGate is seeking a Detection Engineer for its multi-client MSSP environments. The role involves building, testing, deploying, and improving security detections across SIEM, XDR, EDR, cloud, and other security platforms, and translating threat intelligence and incident findings into validated analytics. The…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.
FortiSOAR Administrator
Paramount Computer SystemsAbu DhabiVerified source
Paramount Computer Systems is seeking a FortiSOAR Administrator in Abu Dhabi to manage and optimize customer SIEM/SOAR environments. The role includes administering FortiSOAR and IBM QRadar, developing incident-response automation, and maintaining integrations with security and ITSM platforms. Candidates should have…
24 Oct
No closing dateThe employer's posting doesn't say when it closes. Check it at the source before you apply.