Sr Security Analyst

Role Summary

Technical Skills

• Hold ISO/IEC 27001 Lead Auditor certification and have practical experience leading or managing ISMS audits.
• Manage banking security compliance activities including scope definition, the Statement of Applicability, policies, evidence management, internal audit, corrective actions, management review, and certification readiness.
• Have strong knowledge of banking security, data protection, third-party risk, business continuity, incident management, and regulatory compliance.
• Understand SIEM/SOC, IAM/MFA/PAM, network and endpoint security, vulnerability management, cloud security, DLP, encryption, backup and disaster recovery, and secure SDLC.
• Know PCI DSS, ISO 22301, NIST CSF, CIS Controls, SWIFT CSP, or comparable banking frameworks.
• Exposure to Microsoft Sentinel or Defender, Azure or AWS security, GRC platforms, vulnerability scanners, and audit automation is preferred.

Education and Certifications

• Bachelor’s degree in cybersecurity, information security, computer science, IT, or a related discipline.
• A master’s degree in cybersecurity, information security, or risk management is preferred.
• Valid ISO/IEC 27001 Lead Auditor certification is required.
• At least one of CISA, CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 22301, or PCI DSS certifications is required.

Experience

• Have 5–8 years of information security experience, including at least 3 years in security governance, risk, compliance, or audit within banking or financial services.
• Manage ISO 27001 implementation, internal audit, remediation, and external certification or surveillance audit activities.
• Maintain risk registers, compliance plans, audit evidence, corrective-action tracking, and executive reporting.
• Have experience with PCI DSS, central-bank requirements, privacy compliance, third-party assessments, BIA/BCP/DR, incident exercises, or regulatory reporting.
• Have practical involvement in SOC, vulnerability management, penetration testing, IAM, cloud security, or architecture reviews.

Soft Skills

• Demonstrate ownership, judgment, integrity, and confidence challenging control gaps constructively.
• Communicate clearly in writing and verbally, translating technical risk into practical actions and management reporting.
• Present to executives, audit committees, regulators, external auditors, and bank stakeholders.
• Coach junior analysts and coordinate control owners without relying on formal authority.
• Plan effectively, manage stakeholders, maintain evidence discipline, and follow through across distributed teams.
• Work comfortably with multicultural and remote teams under tight audit deadlines.

Language Requirements

• Professional working proficiency in English is required for formal reports, policies, and executive presentations.
• Arabic is an advantage.

Compensation

• Pay starts from AED 1,000 per month.

Work Location

• The work location is in person.

Responsibilities

• Own and drive an end-to-end banking security compliance program.
• Perform gap assessments, scope definition, risk assessment, and risk treatment.
• Implement and maintain ISO/IEC 27001 requirements, including the Statement of Applicability, policies, and evidence management.
• Lead internal audits, corrective-action management, management reviews, and certification readiness activities.
• Translate technical security risks into practical actions and executive-level reporting.
• Assess banking security, data protection, third-party risk, business continuity, incident management, and regulatory compliance controls.
• Present security risks and compliance matters to executives, audit committees, regulators, external auditors, and bank stakeholders.
• Coach junior analysts and coordinate control owners across distributed teams.
• Maintain risk registers, compliance plans, audit evidence, corrective-action tracking, and regulatory reporting.