Cyber Security Strategy & Governance Consultant – GRC & Operating Model - Onsite Abu Dhabi

Project overview

For a large financial institution in Abu Dhabi with an international environment, an experienced consultant in Cyber Security Strategy & Governance is sought. The focus is on stabilizing and further developing the security organization after major security incidents, as well as building a high-performing Governance, Risk, and Compliance structure. The project is embedded in an international program environment with a larger team of experts.

Responsibilities

Absolutely Required

Advantageous

• Conducting a comprehensive readiness and maturity assessment of the existing security, governance, and compliance landscape based on established frameworks such as NIST CSF and ISO 27001
• Developing a viable Cyber Security and GRC strategy with clear alignment to business requirements, regulatory specifications, and management priorities
• Defining and further developing security policies, guidelines, and standards, including a governance model for their sustainable integration
• Building an integrated Enterprise Cyber Risk Management for identifying, assessing, prioritizing, and managing security risks
• Ensuring regulatory compliance and audit readiness in the context of relevant requirements such as DORA, NIS-2, and comparable compliance specifications
• Designing a Target Operating Model for the future security organization, including roles, responsibilities, RACSI matrix, and interfaces with IT and business departments
• Establishing KPI/KRI-based management reporting for transparent control of the security situation, risks, and progress of measures
• Optimizing collaboration between governance functions and operational security units such as SOC, Incident Response, and Cyber Defense
• Further developing IT crisis management, BCM, and disaster recovery structures, as well as supporting their organizational integration
• Several years of experience in Cyber Security Strategy, Governance, and GRC in regulated corporate environments, ideally in the financial sector
• Very good knowledge of ISO/IEC 27001, NIST CSF, and COBIT, as well as practical experience with regulatory requirements such as DORA and/or NIS-2
• Demonstrable experience in building, transforming, or restructuring security organizations in complex international structures
• Strong ability to translate technical cyber risks into manageable business risks for management and board level
• At least two recognized certifications from CISM, CISSP, CRISC, CISA, or CGEIT
• Practical experience in incident and crisis management, as well as in aligning governance with operational security functions
• Experience in Business Continuity Management and Disaster Recovery
• Background in international transformation programs with intercultural stakeholder management
• Know-how in change management and sustainable integration of a security culture

Project details

• Start: 12/2026
• Duration: 4 Monate
• Remote: onsite
• Location: VAE, DE
• Languages: German