Manager GRC - IT Risk and Cyber Security

We are looking to hire a Manager GRC - IT Risk and Cyber Security who will be responsible for driving technology governance, compliance assurance, audit readiness, and risk oversight initiatives for our semi-government client based in Dubai – one of the largest organisations in the region.

This position is a long term annually renewable contract role and sits within the Information Technology Department, reporting directly to the Head of GRC – Technology

.
We are specifically seeking a hands-on GRC practitioner with strong day-to-day experience working on the ServiceNow GRC platform, not just oversight or advisory exposur

e.The ideal candidate will play a key operational role in configuring, managing, and continuously improving the GRC platform, while also driving policy, compliance, and risk management initiatives across the organisatio

n.
This role requires someone who can bridge technical GRC tooling with real-world risk and compliance execution, ensuring that governance frameworks are not only defined but actively embedded and monitored across systems and process

es.
Key Responsibili

• ties
  Own and operate the ServiceNow GRC platform on a day-to-day basis, including configuration, module management, and continuous enhanc
• ementManage and operationalise key GRC modules within ServiceNow, including Policy & Compliance Management, Risk Management,Third-Party Risk Management (TPRM) and Regulatory Change Manage
• ment.Ensure accurate and real-time reporting dashboards are maintained within the platform for leadership and governance f
• orumsTranslate compliance and risk requirements into practical workflows, controls, and automated monitoring within Servi
• ceNowAlign technology governance and compliance activities with recognised standards such as ISO 27001, ISO 20000, ISO 42000, COBIT, and
• ITILLead ISO framework implementation and ongoing compliance maturity initiatives, including control mapping and gap assess
• mentsDefine and manage the technology compliance roadmap, including policy lifecycle planning and audit read
• inessOwn the end-to-end policy lifecycle (drafting, review, approval, implementation, and governance within sys
• tems)Coordinate internal and external audits, ensuring evidence is system-driven, traceable, and audit-
• readyMonitor and enforce operational controls such as Access and identity management, Change management processes, Backup and recovery controls and CMDB gover
• nanceDrive risk identification, assessment, and mitigation activities, ensuring alignment between business, IT, and compliance stakeho
• ldersSupport governance and compliance requirements for emerging technologies (e.g., AI/ML) and evolving regulatory lands

capes
Knowledge, Skills & Expe

• rience
  10+ years’ experience in technology risk, IT compliance, or GRC roles within large enterprise envir
• onmentsStrong hands-on experience with ServiceNow GRC is mandatory (candidates without practical platform ownership will not be cons
• idered)Proven experience in configuring, managing, and operating GRC tools, not just using them for reporting or t
• rackingDemonstrated experience ma
• naging:Policy & compliance fra
• meworksRisk registers and asse
• ssmentsThird-party/vend
• or riskRegulatory change pr
• ocessesSolid experience in ISO implementations (e.g., ISO 27001, ISO 20000, ISO 42000), including audits and certification
• cyclesStrong understanding of COBIT, ITIL, and enterprise IT control envir
• onmentsExperience in audit coordination with clear ownership of remediation tracking and
• closureAbility to translate technical risks into clear, actionable insights for business stake
• holdersStrong technical acumen combined with operational execution cap
• abilityRelevant certifications such as ISO 27001 Lead Auditor/Implementer, CRISC, CISSP, CISM, CISA, ITIL, or COBIT are highly pr

eferred
Avai

• labilityPreference will be given to candidates who are immediately available or on short notice (30 days