Senior Analyst, Information Security

Role overview

Responsibilities

• Develop, implement, and maintain an enterprise security framework aligned with standards such as ISO 27001 and ISO 27701 and regulations such as ADHICS, ADGM, GDPR, and NESA.
• Define security and compliance strategy and recommend controls, tools, and technologies.
• Operate a healthcare-focused information security risk framework aligned with enterprise risk management.
• Assess technology risks for business initiatives and IT projects, including leading RCSAs; report risks, impacts, mitigation plans, and costs to management.
• Conduct regulatory gap analysis, industry benchmarking, and control maturity assessments.
• Develop and report security and IT risk metrics, including KRIs and KPIs; lead security initiatives and projects.
• Investigate and respond to security and data privacy incidents, and maintain and test the incident response plan.
• Oversee information security and IT controls across the healthcare environment; coordinate audit recommendations, regulatory submissions, and compliance remediation.
• Direct internal teams and external providers, build stakeholder relationships, and represent Information Security in audits.

Qualifications

• Bachelor’s or Master’s degree in IT, Computer Science, Software Engineering, or a related field.
• 5–10 years of information security experience, including at least 5 years in healthcare.
• Experience in security governance, risk management, compliance, security operations, technology risk assessments, and RCSAs.
• Knowledge of healthcare and data protection regulations, including examples such as ADHICS, HIPAA, GDPR, HITRUST, and DOH.
• Understanding of international security frameworks such as ISO 27001 and ISO 27701, and experience with cloud security architectures and service models.
• Strong communication and stakeholder management skills, including engagement with senior leadership, auditors, and regulators.
• Relevant certifications such as CISA, CISM, CISSP, CCSP, or cloud security certifications are listed; UAE or similar regulated healthcare experience and ITIL v4 are preferred.

About M42