Security Assurance Specialist

Role overview

Responsibilities

• Independently assess security controls and remediation evidence against Group requirements, including control design, implementation, and operating effectiveness where applicable.
• Decide whether evidence demonstrates remediation completion and document clear, defensible conclusions in an auditable record.
• Prioritize assurance by risk and milestones; identify evidence gaps and communicate follow-up needs to action owners.
• Trace risks, controls, actions, and evidence with the Business Analyst; reassess residual risk and contribute to consolidated security risk reporting.
• Identify systemic weaknesses, escalate material findings, and assess security readiness through hypercare and future releases.
• Assess against Group policies and standards, ISO/IEC 27001:2022, and NIST CSF; follow the assurance methodology and transition controls into business-as-usual assurance.

Required qualifications

• Strong experience in information security assurance, technology risk, IT audit, or GRC, with demonstrated assessment of security control design and effectiveness.
• Knowledge of ISO 27001, NIST CSF, and risk-based security assurance.
• Practical knowledge across identity and access management, access governance and segregation of duties, vulnerability management, network security, resilience, supplier security, data protection, and security operations.
• Experience weighing technical and governance evidence and writing conclusions that stand up to challenge; analytical rigour and clear written English.
• Candidates must already be based in the UAE.

Preferred qualifications

• Security assurance experience in an SAP or ERP transformation programme is a strong advantage.
• CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor or Lead Implementer, or equivalent certification is advantageous.
• Previous work in the Middle East is advantageous.

Workplace

• Based at the client's Dubai head office with hybrid flexibility.

Contract and compensation

• 12-month full-time contract through Dreamcast Interactive, with extension based on performance.
• Competitive monthly rate benchmarked to the candidate's profile.