Head of ISO

Guildhall is supporting is a fast-growing AI technology company headquartered in Dubai. The company has developed an AI-powered platform that automatically manages building systems such as HVAC, lighting, and energy consumption. Their technology helps buildings operate more efficiently with minimal human intervention.

Job Responsibilities:

ISO & Compliance Management

* Lead the design, implementation, and maintenance of ISO 9001 (Quality Management System) and ISO 27001 (Information Security Management System) across the organization.
* Drive the company through successful ISO certification within the targeted timeline.
* Ensure compliance frameworks remain effective as the business expands internationally.
* Develop and maintain policies, procedures, controls, and governance frameworks.

Audit & Certification

* Plan, coordinate, and conduct internal audits across all business functions.
* Manage external certification audits and maintain relationships with certification bodies.
* Track audit findings and ensure corrective actions are implemented effectively.
* Maintain ongoing compliance and audit readiness across the organization.

Information Security & Quality Governance

* Establish risk management processes, risk registers, and compliance monitoring programs.
* Ensure information security and quality management requirements are integrated into business operations.
* Collaborate with technology, product, operations, and leadership teams to implement best practices.

Documentation & Process Management

* Develop and maintain quality manuals, security policies, standards, procedures, and compliance documentation.
* Ensure all compliance records are properly maintained and readily available for audits.
* Continuously review and improve processes to align with ISO requirements and business objectives.

Stakeholder & Client Support

* Act as the primary compliance representative for internal and external stakeholders.
* Support enterprise sales activities by completing security and compliance questionnaires.
* Present compliance updates, risks, and recommendations to executive leadership.
* Work closely with international teams to ensure consistent compliance standards globally.

Compliance Automation & Innovation

* Identify opportunities to leverage AI and technology to automate compliance activities.
* Implement tools and systems that improve evidence collection, audit tracking, reporting, and compliance monitoring.
* Drive operational efficiency within the compliance function.

Team Development

* Build and lead a scalable compliance function as the company grows.
* Develop compliance awareness and training programs across the organization.
* Mentor and support future compliance team members.

Requirements: 

Education
* Bachelor’s Degree in Information Security, Business Administration, Risk Management, Engineering, Computer Science, or a related field.

Experience
* Minimum 10 years of professional experience in compliance, governance, quality management, information security, or related disciplines.
* Minimum 5 years of direct hands-on experience with both ISO 9001 and ISO 27001.
* Proven track record of implementing and maintaining ISO certifications from inception through successful certification.
* Experience managing internal and external audits.
* Experience working within technology, SaaS, software, cloud, AI, cybersecurity, or fintech environments.
* Experience supporting multi-country or international compliance programs is preferred.

Technical Knowledge:

* Strong knowledge of:
* ISO 9001 Quality Management Systems
* ISO 27001 Information Security Management Systems
* Governance, Risk & Compliance (GRC)
* Risk Management Frameworks
* Information Security Controls
* Compliance Monitoring and Reporting

Certifications (Preferred)
* ISO 9001 Lead Auditor
* ISO 27001 Lead Auditor
* CISM (Certified Information Security Manager)
* CISSP (Certified Information Systems Security Professional)

Systems & Tools
Experience with one or more of the following is preferred:
* OneTrust
* Vanta
* Drata
* ServiceNow
* Other GRC and compliance management platforms

Regulatory Knowledge:
Knowledge of international privacy and data protection regulations, including:
* GDPR
* UAE Data Protection Law
* Singapore PDPA
* Other relevant global compliance frameworks

Skills & Competencies:
* Excellent written and verbal English communication skills.
* Strong stakeholder management and executive presentation abilities.
* Ability to communicate effectively with senior leadership, auditors, clients, and international teams.
* Strong analytical, problem-solving, and decision-making skills.
* Ability to work in a fast-paced, high-growth environment.
* Strong project management and organizational skills.
* Experience using technology and AI solutions to improve compliance operations is highly desirable.

Other Requirements:
* Based in the UAE or willing to relocate to Dubai.
* Willingness to travel internationally (approximately 15–25%) as required.