Cybersecurity Strategy & Governance Consultant – GRC & Operating Model - Onsite in Abu Dhabi (m/f/d)

Responsibilities

• Conducting a comprehensive readiness and maturity assessment of the existing security, governance, and compliance landscape using established frameworks such as NIST CSF and ISO 27001
• Development of a robust cybersecurity and GRC strategy with clear alignment to business requirements, regulatory mandates, and management priorities
• Definition and refinement of security policies, guidelines, and standards, including a governance model to ensure their sustainable implementation
• Establishment of an integrated enterprise cyber risk management system for the identification, assessment, prioritization, and management of security risks
• Ensuring regulatory compliance and audit readiness in the context of relevant requirements such as DORA, NIS-2, and comparable compliance standards
• Design of a target operating model for the future security organization, including roles, responsibilities, a RACSI matrix, and interfaces with IT and functional areas
• Establishment of KPI/KRI-based management reporting for transparent oversight of the security posture, risks, and progress on measures
• Optimizing collaboration between governance functions and operational security units such as SOC, Incident Response, and Cyber Defense
• Further developing IT crisis management, BCM, and disaster recovery structures, as well as providing support for their organizational integration

Requirements