Job Title : Cyber GRC Program Delivery Manager (Remote/Onsite).

Location : Remote/ On-site (UAE).

Experience : 10+ Years.

Role Overview : We are seeking an experienced Cyber GRC Program Delivery Manager (Hands-on) to lead and drive cybersecurity governance, risk, compliance, audit remediation, and regulatory initiatives across the organization. The ideal candidate will have strong experience in Cyber GRC, Information Security Governance, Audit & Compliance, Risk Management, Control Frameworks, and Program Delivery.

Key Responsibilities :

1. Cyber GRC & Program Management :

- Lead end-to-end Cyber GRC initiatives and remediation programs.

- Develop and manage integrated project plans, milestones, dependencies, RAID logs, and executive reporting.

- Drive closure of audit findings, compliance gaps, and risk treatment activities.

- Coordinate cross-functional teams including Security, IT, Compliance, Risk, Audit, Legal, and Business stakeholders.

- Manage multiple concurrent cybersecurity and compliance workstreams.

2. Governance, Risk & Compliance :

- Establish and manage governance forums, steering committees, risk committees, and control review boards.

- Track cybersecurity risks, remediation actions, mitigation plans, and closure evidence.

- Maintain risk registers, issue logs, action trackers, and compliance dashboards.

- Ensure adherence to internal policies, security standards, and regulatory requirements.

3. Audit Remediation & Regulatory Compliance :

- Lead internal and external audit remediation activities.

- Coordinate evidence collection, control validation, and management responses.

- Support audit sign-off and regulatory attestation activities.

- Ensure audit findings are closed within agreed timelines.

4. Control Frameworks & Security Governance :

- Support implementation and improvement of cybersecurity control frameworks.

- Drive control assessments, gap analysis, and maturity improvement initiatives.

- Monitor control effectiveness and remediation progress.

5. Stakeholder & Vendor Management :

- Manage relationships with business leaders, auditors, regulators, vendors, and delivery partners.

- Track vendor performance against SOWs, SLAs, milestones, and deliverables.

- Present executive dashboards, risk updates, and decision papers to leadership teams.

6. Reporting & Delivery Excellence :

- Produce executive-level reporting covering : Risk Status, Control Health, Audit Remediation Progress, Compliance Status, KPIs & KRIs, and Program Health Metrics.

- Ensure delivery against fixed regulatory, audit, and board-driven deadlines.

Technical & Functional Experience :

1. Required :

- Cyber Governance, Risk & Compliance (Cyber GRC).

- Audit Remediation & Compliance Management.

- Information Security Governance.

- Enterprise Risk Management.

- Regulatory Compliance Programs.

- Security Controls & Control Frameworks.

- Third-Party Risk Management.

- Risk Assessments & Treatment Plans.

- Governance Forums & Executive Reporting.

- Program / Project Management.

- RAID Management.

- Stakeholder Management.

- Vendor Management.

2. Preferred Framework Experience :

- ISO 27001.

- NIST Cyber Security Framework (NIST CSF).

- COBIT.

- SOX.

- PCI-DSS.

- NESA / UAE Information Assurance Standards.

- CIS Controls.

3. Preferred Tool Experience :

- Archer, ServiceNow GRC, MetricStream, RSA Archer, OneTrust, SAP GRC, SailPoint, Saviynt, CyberArk, Microsoft Purview, Jira / Confluence, Power BI.