Cybersecurity Governance & Cloud Risk (GRC) - FS

This role sits at the intersection of cybersecurity governance, audit, and cloud/SaaS risk assessment. You will take ownership of audit activities, lead vendor security reviews, and play a key role in approving or rejecting technology solutions based on cybersecurity risk.

Client Details

A highly regulated organisation in Dubai with an established cybersecurity function, focused on strengthening governance, managing risk, and improving security oversight across cloud and SaaS environments. The team is offering strong ownership and exposure to key decision making forums.

Description
Manage cybersecurity audits and compliance activities (ISO, SOC2, GDPR, UAE regulations), including evidence collection and responsesAssess and approve/reject SaaS and cloud solutions, evaluating areas such as data hosting, encryption, compliance, and security postureDesign and manage vendor security questionnaires and conduct end-to-end risk assessmentsLead the Cloud Security Committee, working with cross-functional stakeholders to make risk-based decisionsConfidently challenge vendors and internal stakeholders using clear, evidence-based reasoningSupport cybersecurity initiatives across areas such as IAM, third-party risk, and cloud security (non-hands-on)Apply understanding of key security concepts such as SSO, encryption, access control, and common security toolsPrepare reports, dashboards, and KPIs for leadership and governance forumsSupport AI security assessments, including evaluation of tools like ChatGPT/LLM platforms and associated risksYou will also support broader cybersecurity initiatives and reporting while working closely with stakeholders across IT, Legal, Compliance, and the business.


Profile
7-10 years experience in cybersecurity, ideally within Big 4 / consulting (Cyber, Risk, Technology) or Banking, investment, or other regulated environmentsStrong experience in:
Cybersecurity audits and compliance frameworks (ISO, SOC2, GDPR, UAE frameworks etc.)Vendor risk management and SaaS/cloud security assessments
Good technical understanding (not purely policy focused), including:
Cloud basics (Azure)SSO and authenticationEncryption and data protectionSecurity tools such as PAM, endpoint protection, firewall, access etc.
Experience assessing vendors and challenging gaps and working cross functionally in an organisation.Confident communicator, able to push back and make decisions independentlyComfortable working in a small team with limited hand holdingOpen to learning and developing in areas such as AI security and emerging risks


Job Offer
High ownership roleDirect involvement in decision making on technology and vendor approvalsStrong exposure to senior stakeholders and governance forumsOpportunity to work across cloud, SaaS, and emerging areas like AI security