Compliance Officer (IT & Information Security)
Experience Required: 4–6 Years
Job Summary
We are looking for a Compliance Officer to ensure the organization adheres to information security policies, regulatory requirements, and internal governance standards.
The role involves policy management, audit support, risk assessment, and compliance monitoring across IT, cloud, and operational environments.
Key Responsibilities
• Ensure compliance with:
o Internal policies and procedures
o Regulatory requirements (e.g., UAE PDPL)
o Industry standards (e.g., ISO 27001)
• Develop, review, and maintain policies, procedures, and control frameworks
• Conduct risk assessments and maintain risk registers
• Support and coordinate:
o Internal audits
o External audits (ISO / client / regulatory)
• Monitor and validate:
o Access controls (IAM / RBAC)
o Change management processes
o IT and cloud operations
• Ensure all activities are:
o Properly approved
o Logged and documented
o Auditable
• Track and follow up on audit findings and corrective actions
• Promote compliance awareness and security best practices across teams
• Support incident reporting, exception handling, and RCA activities
Required Skills
• Strong knowledge of:
o ISO 27001 or information security frameworks
o Risk management and audit processes
• Good understanding of:
o IT infrastructure and cloud environments
o Access control and security practices
• Experience in:
o Policy drafting and documentation
o Audit coordination and compliance monitoring
Qualifications
• Bachelor’s degree in IT, Information Security, Risk Management, or related field
• 4–6 years of experience in compliance, IT governance, or information security
Preferred Skills (Good to Have)
• Certifications such as:
o ISO 27001 Lead Implementer / Lead Auditor
• Experience with:
o UAE PDPL or regional regulatory requirements
o Cloud security and governance
Key Competencies
• Strong attention to detail and analytical skills
• Good documentation and reporting ability
• Ability to work independently and enforce policies
• Good communication and stakeholder coordination skills