Senior Specialist, Information Security (GRC)
Core
Leads complex governance, risk, and compliance (GRC) activities, serving as a subject matter expert in enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management for a fintech organization.
Role type
Senior IC GRC Specialist (Information Security)
Builds
Mature GRC frameworks, risk treatment processes, compliance reporting mechanisms, and regulatory self-assessments aligned with UAE Fintech regulations.
Domain
Fintech / Information Security Governance
Required skills
Enterprise information security governance, Risk management frameworks, Regulatory compliance, Third-party risk management, Risk assessment methodologies, Audit coordination, Compliance monitoring, Security awareness program design, GRC metrics dashboarding, Contract security requirements integration
Preferred skills
Fintech or banking environment experience, Master's degree in Information Security/Risk Management, CDPSE certification
Technologies
CSF, NCA ECC, ISO 27001, PCI-DSS, PDPL
Responsibilities
Lead development and continuous improvement of security policies and governance frameworks; Lead execution of complex enterprise risk assessments and maintain the risk register; Lead compliance monitoring activities and manage internal/external audit cycles; Design and deliver security awareness programs; Represent the GRC function in cross-functional working groups and regulatory workstreams. (via careerplan.io/jobs/590554-senior-specialist-information-security-grc-at-tabby)
Seniority
Senior, hands-on IC with mentoring responsibilities