risk and compliance consultant

help AG

<div><p>Help AG is looking for a talented and experienced Cyber Trust Advisory Consultant (UAE National) who will be responsible for the successful hands-on delivery of tasks that lead to successful completion of consultancy projects related to governance, risk and compliance services within the defined budget and timeline.</p><p>
This role includes tasks related to third party cybersecurity risk management, data classification consulting, business impact analysis, risk assessments, and treatment planning, effectiveness measurements, development of policies and procedures, awareness presentations, and any other documentation to achieve compliance with the intended standards or compliance requirements within the countries that Help AG operates in. The Cyber Trust Advisory Consultant (UAE National) will be expected to work independently and as part of a cross-functional team, led by a project or program manager.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Hands-on delivery of consultancy projects related to but not limited to third-party cybersecurity risk management, SOC consulting, Data Classification, ISO/IEC 270XX, ISO 22301, ISO/IEC 20000-1, NCA, ISR, NESA, SAMA, and CITC standards/regulations/requirements.</p></li><li><p>
Support the presales activities in relation to the identified consulting services.</p></li><li><p>
Interface with management for project-related matters</p></li><li><p>
Gaining familiarity with the technical products in the Help AG portfolio and integrating this knowledge for the management system consultancy</p></li><li><p>
Supporting the standardization activities</p></li><li><p>
Identifying own areas of work and further developing existing work areas</p></li><li><p>
Providing feedback on service lines enhancement</p></li><li><p>
Representing Help AG Consulting team in events/PR.</p></li></ul><p></p><p><b>
Qualifications &amp; Skills:</b></p><p></p><ul><li><p>
University degree in a technical subject related to IT and/or Information Security.</p></li><li><p>
UAE National candidates with family book will be preferred for this role</p></li><li><p>
Minimum of 1-3 years of working experience in a similar capacity.</p></li><li><p>
Expert knowledge of at least 3 of the following: SOC consulting, ISO/IEC 27001, ISO 22301, ISO/IEC 20000-1, ISR, NESA, NCA, SAMA CSF, and CITC standards/ regulations/ requirements.</p></li><li><p>
One or more formal certifications related to above standards.</p></li><li><p>
Hands-on experience in delivery project activities related to the above.</p></li><li><p>
Industry professional certifications such as CISSP, CISM, and CISA is desirable.</p></li><li><p>
Excellent consulting skills; strong customer and business focus.</p></li><li><p>
Good communication and interpersonal skills.</p></li><li><p>
Ability to understand complex business processes and activities.</p></li><li><p>
Flexible work approach, based on the job requirements.</p></li></ul><p></p><p><b>
Benefits:</b></p><p></p><ul><li><p>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/Hybrid working environment.</p></li><li><p>
Open door policy.</p></li></ul><p></p><p><b>
About Us:</b></p><p></p><p>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.</p><p>
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div><p></p>

Cyber Trust Advisory Consultant (UAE National)

Inbox Business Technologies

<div>
 <strong>
  Job Summary:
  <br/>
  <br/>
 </strong>
 We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.
 <br/>
 <br/>
 <strong>
  Job Description:
  <br/>
  <br/>
 </strong>
 <strong>
  ISMS Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).
  </li>
  <li>
   Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.
  </li>
  <li>
   Participate in risk assessments and help develop mitigation strategies.
  </li>
  <li>
   Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.
  </li>
  <li>
   Prepare documentation and provide support during ISO 27001 certification audits.
  </li>
  <li>
   Conduct security awareness training and incident management processes.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  IT GRC Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).
  </li>
  <li>
   Support IT risk assessments, compliance audits, and regulatory reporting activities.
  </li>
  <li>
   Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.
  </li>
  <li>
   Support in developing and maintaining IT compliance programs and policies.
  </li>
  <li>
   Contribute to the development and implementation of GRC tools and processes.
  </li>
  <li>
   Participate in internal audits and help clients prepare for external certification audits/compliance checks.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Minimum Bachelor's degree in Information Security, Computer Science, or a related field.
  </li>
  <li>
   Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.
  </li>
  <li>
   Experience: 3-4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.
  </li>
  <li>
   Familiarity with ISO 27001 gap assessments, risk assessments, and audits.
  </li>
  <li>
   Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).
  </li>
  <li>
   Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.
  </li>
  <li>
   Strong documentation, report writing, and communication skills is a must.
  </li>
 </ul>
</div>


Consultant - ISMS/GRC

<div><p><b>Job Summary:</b></p><p>
We are seeking a Consultant with proven experience in implementing and maintaining ISO 27001-based Information Security Management Systems (ISMS) and IT Governance, Risk, and Compliance (IT GRC) frameworks. The ideal candidate will have hands-on expertise in ISO 27001 gap assessments, risk assessments, policy development, and certification audit preparation, along with working knowledge of standards such as NIST, NCA, SAMA, COBIT, and ITIL. This role involves supporting compliance programs, developing security controls, conducting awareness training, and assisting clients in aligning IT strategies with regulatory requirements including GDPR, HIPAA, and PCI-DSS. Strong documentation, auditing, and communication skills are essential.</p><h3 class="jobSectionHeader"><b>
Job Description:</b></h3><p><b>
ISMS Responsibilities:</b></p><ul><li>
Experience of implementation and maintenance of ISO 27001-based Information Security Management Systems (ISMS).</li><li>
Perform gap assessments to identify areas of non-compliance and assist in remediation planning against various standards &amp; frameworks like, NIST, NCA, SAMA etc.</li><li>
Participate in risk assessments and help develop mitigation strategies.</li><li>
Developing ISMS policies, procedures, and security controls aligned with ISO 27001 standards.</li><li>
Prepare documentation and provide support during ISO 27001 certification audits.</li><li>
Conduct security awareness training and incident management processes.</li></ul><p><b>
IT GRC Responsibilities:</b></p><ul><li>
Assist in developing and implementing IT governance frameworks (COBIT, NIST, ITIL).</li><li>
Support IT risk assessments, compliance audits, and regulatory reporting activities.</li><li>
Help clients align IT strategies with their business goals while ensuring compliance with regulations like COBIT, GDPR, HIPAA, SOX, etc.</li><li>
Support in developing and maintaining IT compliance programs and policies.</li><li>
Contribute to the development and implementation of GRC tools and processes.</li><li>
Participate in internal audits and help clients prepare for external certification audits/compliance checks.</li></ul><p><b>
Requirements</b></p><ul><li>
Minimum Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field.</li><li>
Certifications (preferred): ISO 27001 Lead Implementer / Lead Auditor, CISM, CRISC, or COBIT Foundation.</li><li>
Experience: 3&ndash;4 years of experience in ISMS and IT GRC consulting, auditing, or implementation.</li><li>
Familiarity with ISO 27001 gap assessments, risk assessments, and audits.</li><li>
Basic knowledge of IT governance frameworks (COBIT, NIST, ITIL, etc.).</li><li>
Understanding of regulatory compliance such as GDPR, NIST, and PCI-DSS.</li><li>
Strong documentation, report writing, and communication skills is a must.</li></ul></div>

DXC Technology

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 <br/>
 <br/>
 The SAP GRC Consultant is responsible for designing, implementing, and supporting SAP Governance, Risk, and Compliance (GRC) solutions to strengthen internal controls, risk management, user access governance, and compliance reporting. The consultant will work closely with security, audit, and business stakeholders to ensure regulatory adherence (SOX, IFRS, ISO, local compliance) and alignment with enterprise risk management frameworks.
 <br/>
 <br/>
 <strong>
  Key Process &amp; Technical Knowledge
  <br/>
  <br/>
 </strong>
 <strong>
  The Consultant Should Have Strong Expertise In
  <br/>
  <br/>
 </strong>
 <strong>
  SAP GRC Access Control (AC):
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   User Access Management (UAR)
  </li>
  <li>
   Emergency Access Management (EAM / Firefighter)
  </li>
  <li>
   Access Risk Analysis (ARA)
  </li>
  <li>
   Business Role Management (BRM)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  SAP GRC Process Control (PC)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Control design, documentation, monitoring, and testing
  </li>
  <li>
   Continuous Control Monitoring (CCM)
  </li>
  <li>
   Policy management &amp; workflow
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  SAP GRC Risk Management (RM)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Enterprise Risk Management framework configuration
  </li>
  <li>
   Risk assessment methodologies
  </li>
  <li>
   Key Risk Indicators (KRIs)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  SAP Audit Management (AM)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Planning and execution of audit engagements
  </li>
  <li>
   Integration with risk and process control
  </li>
  <li>
   Audit reporting and follow-up tracking
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Integration Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   SAP GRC with SAP S/4HANA security concepts
  </li>
  <li>
   Interfaces with Identity Management (IDM) and LDAP/AD
  </li>
  <li>
   Understanding of SoD (Segregation of Duties) frameworks
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams
  </li>
  <li>
   Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules
  </li>
  <li>
   Perform SoD analysis, remediation, and mitigating control design
  </li>
  <li>
   Implement workflow automation for user provisioning and access approvals
  </li>
  <li>
   Support business role design and access governance
  </li>
  <li>
   Enable continuous monitoring of controls and risks in SAP and non-SAP environments
  </li>
  <li>
   Provide expertise during internal and external audits
  </li>
  <li>
   Deliver end-user and key-user training on SAP GRC functionalities
  </li>
  <li>
   Work closely with Basis and Security teams to ensure compliance with corporate IT policies
  </li>
  <li>
   Support cutover, hypercare, and ongoing compliance operations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Qualifications &amp; Skills
  <br/>
  <br/>
 </strong>
 <strong>
  Education &amp; Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Information Systems, Computer Science, Finance, or related field
  </li>
  <li>
   SAP GRC Certification (preferred)
  </li>
  <li>
   CISA, CISM, CRISC, or similar audit/security certifications (advantage)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5&ndash;8 years in SAP Security &amp; Compliance, with minimum 3 years in SAP GRC
  </li>
  <li>
   Hands-on implementation/support in Access Control + at least one of PC/RM/AM
  </li>
  <li>
   Experience with SoD rule set customization and remediation
  </li>
  <li>
   Exposure to compliance frameworks like SOX, GDPR, ISO 27001, NCA/NCA ECC
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Technical Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong knowledge of SAP authorization concepts (roles, profiles, SUIM, SU24, PFCG)
  </li>
  <li>
   Expertise in GRC workflow, BRF+, MSMP configuration
  </li>
  <li>
   Understanding of connector setup between GRC and SAP systems
  </li>
  <li>
   Familiarity with audit and risk management best practices
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Soft Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong analytical and problem-solving skills
  </li>
  <li>
   Excellent communication for engaging business, audit, and IT teams
  </li>
  <li>
   Ability to work under compliance pressure and deadlines
   <br/>
   <br/>
  </li>
 </ul>
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 <br/>
 <br/>
 <strong>
  Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available
 </strong>
 here
 <strong>
  <em>
   .
  </em>
 </strong>
</div>


SAP GRC / Audit / Risk Management

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><p>Job Description :</p>
<div>
<div><ul><li>Control self-assessment methodology for the organization&rsquo;s integrated control framework.</li>
<li>Review the control testing responses and evidence submitted by control owners and engage for process walkthroughs and clarifications if any.</li>
<li>Document the observations/ findings and publish internal control testing status to the executive committee.</li>
<li>Performing analysis of revisions/ updates to regulatory requirements and identify gaps in the current organization control framework.</li>
<li>Engage with the client / vendors / Partners to enhance the control testing and remediation workflow.</li></ul></div></div>
</div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Consultant</div>
</div><div><div><b>Job Id</b></div>
<div>378390</div>
</div><div><div><b>Desired Skills</b></div>
<div>GRC | Incident Management</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF COMPUTER APPLICATION, BACHELOR OF COMPUTER SCIENCE, BACHELOR OF ENGINEERING</div></div></div><div></div>

<div>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 We are seeking
 <strong>
  senior cybersecurity professionals
 </strong>
 at the
 <strong>
  Consultant and Senior Consultant
 </strong>
 levels to provide
 <strong>
  strategic cybersecurity leadership, enterprise risk oversight, and advisory services
 </strong>
 . These roles ensure that the organization&rsquo;s systems, networks, and data are
 <strong>
  protected from threats
 </strong>
 , compliant with regulations, and aligned with business objectives.
 <br/>
 <br/>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 <strong>
  For Both Levels
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provide strategic guidance on cybersecurity infrastructure, policies, and risk management.
  </li>
  <li>
   Oversee enterprise-wide threat detection, vulnerability management, and incident response programs.
  </li>
  <li>
   Ensure compliance with cybersecurity standards, regulations, and best practices.
  </li>
  <li>
   Advise executive leadership on cyber risk, emerging threats, and technology investments.
  </li>
  <li>
   Represent the organization in external cybersecurity engagements and forums.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Additional For Senior Consultant
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Define and implement long-term cybersecurity strategy and roadmaps.
  </li>
  <li>
   Lead multi-year cybersecurity transformation programs and enterprise-wide initiatives.
  </li>
  <li>
   Mentor and develop expert cybersecurity teams across the organization.
  </li>
  <li>
   Influence organizational decisions on risk, security investments, and technology adoption.
  </li>
  <li>
   Serve as a trusted advisor to the C-suite and board on all cybersecurity matters.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications &amp; Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Education: Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, Computer Science, or related field.
  </li>
  <li>
   Consultant: 17&ndash;19 years of experience in cybersecurity leadership, enterprise security operations, or strategic advisory.
  </li>
  <li>
   Senior Consultant: 20+ years of experience in executive-level cybersecurity leadership and strategic consulting.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills &amp; Competencies
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Expert knowledge of cybersecurity architecture, risk management frameworks, and regulatory compliance.
  </li>
  <li>
   Proven experience leading enterprise cybersecurity programs, incident response, and threat mitigation.
  </li>
  <li>
   Strategic thinking, leadership, and stakeholder engagement at executive levels.
  </li>
  <li>
   Ability to drive transformation, implement advanced security technologies, and influence organizational strategy.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CISSP, CISM, CEH, OSCP, or equivalent senior-level cybersecurity certifications.
  </li>
 </ul>
</div>


Technical Analyst / Specialist (Consultant & Senior Consultant)

Search 10000+ Risk and compliance consultant jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 risk and compliance consultant jobs NEAR_ME

Cyber Trust Advisory Consultant (UAE National)

Consultant - ISMS/GRC

Consultant - ISMS/GRC

Consultant - ISMS/GRC

SAP GRC / Audit / Risk Management

GRC

Technical Analyst / Specialist (Consultant & Senior Consultant)