Information Security Specialist

Role overview

Key responsibilities

• Manage the security environment for IT infrastructure, networks, applications, and systems.
• Support implementation and ongoing compliance with Dubai Government ISR and ISMS frameworks.
• Investigate security incidents, system misuse, unauthorized access attempts, and policy violations.
• Assess threats and risks across infrastructure, applications, systems, and communications and recommend mitigations.
• Monitor security hardware and software and assess the impact of vendor changes, upgrades, and emerging technologies.
• Improve security policies, controls, processes, and technologies; research and support new security technology implementation.
• Coordinate with external suppliers and service providers on technical support, security solutions, and requirements.
• Collaborate with internal IT and business teams to maintain IT service availability, reliability, and scalability against business needs and SLAs.
• Ensure compliance with quality standards, security policies, ISR, and ISMS requirements.

Knowledge, skills, and experience

• Experience in information security, cybersecurity, IT risk management, or information security governance.
• Practical information-security-framework experience; Dubai Government ISR and ISMS knowledge is preferred.
• Strong knowledge of risk assessments, threat identification, vulnerability management, and security-control implementation.
• Experience assessing IT infrastructure, network, application, system, and communications security.
• Understanding of security policies, compliance, audit, and remediation; knowledge of security architecture, monitoring, incident investigation, and technologies.
• Experience coordinating with internal IT teams, external vendors, and service providers.
• Strong analytical, problem-solving, communication, and stakeholder-management skills.
• CISSP, CISM, CISA, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor certifications are advantageous.

Availability

• Immediate availability is preferred.