Business Lead

About ISONEX

ISONEX is a specialist advisory firm focused on compliance across the GCC and the wider MENA region. The company supports organisations through ISO 27001, SOC 2, and more than twenty other frameworks, aiming to deliver faster outcomes and stronger accountability than conventional consulting approaches. Its main specialty is ISO 27001, where it targets completion of the Stage 2 audit within 75 days, compared with the usual six to nine months.

The organisation follows a remote-first, practitioner-led approach, with registered offices in Manama, Dubai, and Riyadh, and a selected network of senior specialist consultants.

Role overview

The Business Lead owns each client engagement at ISONEX from the first conversation through to certification. This person represents the firm to clients, drives new business, and coordinates the specialist consultant network. Working closely with the co-founder, the Business Lead helps turn ISONEX’s promise of fast, accountable, practitioner-led delivery into a client experience that matches the brand.

This is a senior, practical position that combines business development, relationship management, and delivery oversight. It is not limited to sales or project management; instead, it requires someone who can secure work, manage the client relationship, and keep delivery moving smoothly.

Key responsibilities

The role covers four main areas: client engagements, business growth, consultant coordination, and internal operations.

• Take full ownership of every engagement from kickoff through certification or audit completion.
• Serve as the main client contact, managing expectations, sharing updates, and addressing issues before they escalate.
• Safeguard timelines and quality standards, stepping in whenever an engagement needs guidance or direction.
• Lead discovery conversations with prospective clients, assess needs, define scope, and prepare proposals.
• Develop and maintain a healthy pipeline of opportunities across international markets.
• Represent ISONEX professionally to founders, security leaders, and procurement stakeholders.
• Assign the most suitable specialist consultant to each project based on framework and industry.
• Coordinate consultants across the firm’s five delivery phases: scope, gap diagnostic, build, operate, and audit support.
• Ensure delivery quality stays consistent with the standard expected from the ISONEX brand.
• Contribute to how the firm scales by improving delivery processes, templates, and working methods.
• Share market insight with the leadership team to strengthen positioning and service design.

Success measures in the first 6 to 12 months

• Every live engagement has a clearly assigned owner, a realistic plan, and a client who is kept fully informed.
• A steady pipeline of qualified prospects is developing across the region.
• A dependable consultant bench is actively matched and managed across ongoing work.
• The company’s first clients are certified on time and become reference accounts.

Who should apply

This opportunity is suited to an experienced GRC, compliance, or cybersecurity consultant who has owned client relationships and delivery outcomes end to end. It is especially relevant for someone who is commercially minded, confident in client-facing discussions, and comfortable operating across both growth and delivery responsibilities.

Additional requirements

• At least 5 years of experience in GRC, compliance, or cybersecurity consulting, preferably in a role that involved client ownership or delivery accountability.
• A proven record of managing client relationships from start to finish.
• Strong commercial judgement, including the ability to scope work, prepare proposals, and close business.
• Solid practical knowledge of ISO 27001 and SOC 2, with exposure to broader compliance frameworks.
• Strong presentation and communication skills, with the confidence to act as the external face of the firm.
• Understanding of the GCC market and how compliance services are purchased and delivered in that region.
• ISO 27001 Lead Implementer or Lead Auditor certification, or an equivalent qualification.
• Knowledge of GCC-related frameworks such as NCA ECC, SAMA CSF, and regional data protection regulations.
• An existing professional network within global technology, financial services, or government-adjacent organisations.
• Fluency in English.

Working model

Reports to: Co-founder

Location: Remote

Application instructions

Interested candidates are asked to send a CV along with a brief note describing one compliance engagement they have personally owned from start to finish.