Cybersecurity Governance & Cloud Risk (GRC) - FS

High impact, high ownership role within a cybersecurity team Strong focus on audits, SaaS/cloud security, and governance The team is offering strong ownership and exposure to key decision making forums. Manage cybersecurity audits and compliance activities (ISO, SOC2, GDPR, UAE regulations), including evidence collection and responses Assess and approve/reject SaaS and cloud solutions, evaluating areas such as data hosting, encryption, compliance, and security posture Design and manage vendor security questionnaires and conduct end-to-end risk assessments Lead the Cloud Security Committee, working with cross-functional stakeholders to make risk-based decisions Confidently challenge vendors and internal stakeholders using clear, evidence-based reasoning Support cybersecurity initiatives across areas such as IAM, third-party risk, and cloud security (non-hands-on) Apply understanding of key security concepts such as SSO, encryption, access control, and common security tools Prepare reports, dashboards, and KPIs for leadership and governance forums Support AI security assessments, including evaluation of tools like ChatGPT/LLM platforms and associated risks You will also support broader cybersecurity initiatives and reporting while working closely with stakeholders across IT, Legal, Compliance, and the business. Desired Candidate Profile 7-10 years experience in cybersecurity, ideally within Big 4 / consulting (Cyber, Risk, Technology) or Banking, investment, or other regulated environments Strong experience in: Cybersecurity audits and compliance frameworks (ISO, SOC2, GDPR, UAE frameworks etc.) Vendor risk management and SaaS/cloud security assessments Good technical understanding (not purely policy focused), including: Cloud basics (Azure) SSO and authentication Encryption and data protection Security tools such as PAM, endpoint protection, firewall, access etc. Experience assessing vendors and challenging gaps and working cross functionally in an organisation. Confident communicator, able to push back and make decisions independently Comfortable working in a small team with limited hand holding Open to learning and developing in areas such as AI security and emerging risks