IT Security- Risk Management
Key Skills for This Role
Full Job Posting
Cybersecurity governance, risk and compliance
- Implement and maintain governance practices aligned with UAE regulatory requirements, relevant sector-specific requirements, ISO 27001, NIST, and organizational policies.
- Assess cybersecurity risks across applications, infrastructure, networks, cloud services, technology projects, vendors, and significant IT changes.
- Track inherent and residual risks, control gaps, remediation actions, owners, and target closure dates.
- Develop risk treatment plans and manage exceptions, risk acceptances, compensating controls, and periodic reviews.
- Maintain risk registers and evidence in an enterprise GRC platform such as RSA Archer or an equivalent.
- Monitor remediation and escalate overdue, high, and critical risks to management and governance committees.
Technical security reviews and risk assessments
- Review solution architectures, technical designs, implementation plans, and technology proposals before deployment.
- Assess security across on-premises infrastructure, networks, operating systems, databases, web applications, APIs, cloud platforms, identity and access management, and security technologies.
- Review configurations, access controls, authentication, encryption, network segmentation, logging, vulnerability management, endpoint protection, and data protection.
- Evaluate security assessment and penetration testing findings, proposed remediation, and residual risk.
- Review cloud and SaaS solutions, integrations, third-party connectivity, data flows, hosting, and data residency against security and regulatory obligations.
- Assess security requirements for procurement, technology acquisitions, infrastructure changes, and new implementations.
- Identify security design weaknesses, misconfigurations, control deficiencies, and compliance gaps; recommend remediation and compensating controls.
- Verify security requirements before go-live and ensure unresolved risks are mitigated or formally accepted by authorized stakeholders.
Pay
- Pay range is AED 20,000–22,000 per month.
Work location
- Work location is in person.
Requirements
- Implement and maintain cybersecurity governance practices aligned with applicable UAE regulatory requirements, relevant sector-specific requirements, ISO 27001, NIST, and organizational security policies.
- Assess cybersecurity risks across applications, infrastructure, networks, cloud services, technology projects, vendors, and significant IT changes.
- Review technical architectures, system designs, implementation plans, and technology proposals for security risks.
- Assess security controls involving configurations, access, authentication, encryption, network segmentation, logging, vulnerability management, endpoint protection, and data protection.
- Evaluate vulnerability assessment and penetration testing findings, proposed corrective actions, and residual risk.
- Review cloud and SaaS solutions, integrations, third-party connectivity, data flows, hosting arrangements, and data residency against security and regulatory obligations.
- Maintain risk registers and evidence in an enterprise GRC platform such as RSA Archer or an equivalent solution.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Ceenex Global LLC
MongoDB Database Administrator
, UAE
The employer is seeking a certified MongoDB DBA with strong production administration experience. You will manage database availability, performance, security, backups, recovery, and operational support across multiple e
POWER BI LEAD
, UAE
The employer is seeking an experienced Power BI Lead to design and govern enterprise BI solutions using Power BI, Microsoft Fabric, and Azure data services. The role combines hands-on analytics development, technical lea
Genetec VMS Specialist
, UAE
The employer is seeking a Genetec VMS Specialist to design, deploy, configure, administer, and manage its Genetec Security Center platform. The work includes server architecture, CCTV and endpoint provisioning, recording
Senior Analyst
, UAE
Ceenex Global LLC is seeking a Senior Analyst to deliver analytical and automated solutions that improve airport passenger flow and operational efficiency. Candidates need substantial aviation experience, strong analytic
Desktop Support Engineer
, UAE
The employer is seeking a desktop support professional with at least four years of end-user, helpdesk, or technical support experience. The role covers workstation and device troubleshooting, account administration, serv
Sr Analyst - Operations Business Systems
, UAE
The employer is seeking an Airport Operations Systems Lead to implement, integrate, and manage mission-critical airport systems across terminal, airfield, and baggage operations. The role requires 10 years of airport sys
Senior Analyst - Operations Business Systems
, UAE
The employer seeks an experienced airport systems leader to implement and oversee mission-critical terminal, airfield, and baggage technologies. Candidates need substantial airport systems or aviation IT experience, expe
L3 Security Engineer
, UAE
The employer is seeking an experienced L3 Security Engineer to troubleshoot and administer enterprise cybersecurity and network-security infrastructure. Candidates need deep troubleshooting experience, at least 13 years
MongoDB Database Administrator
, UAE
POWER BI LEAD
, UAE
Genetec VMS Specialist
, UAE
Senior Analyst
, UAE
Desktop Support Engineer
, UAE
Sr Analyst - Operations Business Systems
, UAE
Senior Analyst - Operations Business Systems
, UAE
L3 Security Engineer
, UAE