We are seeking a highly skilled Senior Security Engineer (GRC & Advisory) to join our Cybersecurity & Advisory Services team. The ideal candidate will play a pivotal role in driving security governance, risk management, and compliance initiatives, while providing strategic advisory services to clients. This role requires a mix of deep technical understanding, regulatory knowledge, and business acumen to ensure security aligns with organizational goals.
Key Responsibilities
- Lead Governance, Risk, and Compliance (GRC) engagements, including assessments, frameworks, and implementation.
- Develop and maintain security strategies, roadmaps, and policies aligned with industry standards and client objectives.
- Provide advisory services on risk management, regulatory requirements, and cybersecurity best practices.
- Conduct risk assessments, gap analysis, and compliance audits (ISO 27001, NIST, GDPR, PCI-DSS, etc.).
- Design and implement enterprise-wide security governance frameworks to strengthen organizational resilience.
- Engage with C-level stakeholders to translate security risks into business impact and strategic recommendations .
- Collaborate with internal / external teams to ensure effective incident response, business continuity, and risk mitigation .
- Stay up to date with emerging threats, regulations, and security technologies to proactively guide clients.
Qualifications & Skills
Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science, or related field .7+ years of experience in Cybersecurity GRC, Risk Management, and Security Advisory roles .Strong knowledge of governance frameworks and standards (ISO 27001, NIST, COBIT, PCI-DSS, GDPR, CSA, etc.).Experience in developing security strategies, policies, and compliance roadmaps .Proven ability to engage with senior executives and deliver high-impact advisory services .Excellent communication, presentation, and stakeholder management skills.Relevant certifications preferred :CISM, CISSP, CRISC, CISA, ISO 27001 Lead Implementer / Lead Auditor, CGEIT .Show more
Show less
Skills Required
Lead Auditor, Gdpr, Compliance Audits, Cisa, Gap Analysis, Business Continuity, Csa, Iso 27001, Incident Response, Cobit, Cissp, nist, cgeit, crisc , Risk Mitigation, Cism