GRC Implementation Consultant

Al Reem Group

1. GRC Framework Implementation

Lead end-to-end implementation of GRC programs based on frameworks such as ISO 27001 and local regulations (e.g., UAE IA, TDRA, CSC, NCEMA).

Develop and deploy governance structures, policies, standards, and procedures.

Facilitate risk assessments (operational, IT, cybersecurity, vendor risk).

Map risks to controls and recommend risk treatment plans.

2. Compliance & Audit Management

Implement and monitor compliance programs to ensure adherence to regulatory and internal requirements.

Conduct control assessments, maturity assessments, and internal audits.

Support external audits by preparing evidence, documentation, and remediation plans.

Track non-conformities, CAPA (Corrective Actions), and compliance KPIs.

3. Risk Management Activities

Run enterprise, IT, cybersecurity, and vendor risk assessments.

Maintain and update the enterprise risk register.

Analyze threats, vulnerabilities, impact, and likelihood to calculate risk scores.

Provide recommendations to mitigate or optimize risks.

4. Resilience and Business Continuity

Design, implement, and maintain the Business Continuity Management System (BCMS) including Business Impact Analysis (BIA), Business Continuity & Recovery Planning, Crisis & Incident Management, Testing, Exercising & Maintenance, Training & Awareness, Compliance, Audit & Assurance

5. Stakeholder Engagement & Advisory

Conduct workshops, awareness sessions, and training for process owners.

Collaborate with IT, Business, HR, Legal, Operations, and external auditors.

Serve as a subject matter advisor on governance, cyber regulations, and best practices.

6. Documentation & Reporting

Prepare detailed project documentation, implementation plans, and status reports.

Develop SoPs, risk treatment plans, audit reports, and compliance dashboards.

Report risk posture, compliance gaps, KRIs, and KPIs to management.

7. Project Management

Manage the client engagement independently in terms of Project plan, deliverables and closure