Senior Associate Information Security- Emirati

• Contribute to the development, implementation, and continuous enhancement of the organization's information security governance framework, standards, and operating procedures.
• Assess the effectiveness of security controls and recommend improvements to strengthen the overall cybersecurity posture across technology environments and third-party engagements.
• Perform regular security reviews, control assessments, and compliance evaluations to identify risks, vulnerabilities, and opportunities for improvement.
• Support the governance and oversight of information security initiatives, ensuring alignment with organizational objectives and regulatory expectations.
• Review security configurations, user privileges, network controls, and infrastructure settings to verify compliance with security best practices and identify potential weaknesses.
• Establish and monitor security performance indicators and risk metrics, providing meaningful reporting to support informed decision-making.
• Participate in technology initiatives and transformation programs by performing security reviews, identifying potential risks, and recommending practical mitigation strategies throughout the project lifecycle.
• Develop, maintain, and periodically test cybersecurity incident response capabilities to ensure effective preparation, response, and recovery from security events.
• Support compliance activities related to information security, data protection, and regulatory obligations, including internal and external audit engagements.
• Monitor the effectiveness of cybersecurity platforms and privileged access controls while supporting the implementation of new security technologies and continuous improvement initiatives.
• Review business resilience, disaster recovery, and continuity arrangements to ensure appropriate planning, testing, and operational readiness.
• Work closely with risk management and assurance functions to identify emerging cyber risks, evaluate their impact, and support the implementation of effective mitigation measures.
• Evaluate security-related operational processes and internal controls, recommending enhancements to reduce exposure to cyber threats, data compromise, and operational risk.
• Maintain risk documentation and follow up on mitigation plans, ensuring identified actions are tracked, monitored, and completed within agreed timelines.
• Support enterprise risk, data governance, and fraud prevention initiatives by promoting consistent implementation of security and governance controls across the organization.
• Deliver cybersecurity awareness sessions and promote a security-first culture through ongoing education and engagement initiatives.
• Assist with maintaining compliance against recognized industry standards and regulatory frameworks, coordinating assessments, certifications, and remediation activities where required.
• Stay up to date with emerging cybersecurity threats, new technologies, and industry best practices, and recommend improvements to strengthen the organization's overall security posture.

Requirements

Education & Skills

• Bachelor’s degree in a related field
• Master’s or specialization in Computer Science, Engineering, or IT (Preferred)
• Professional cybersecurity certification (e.g., CISSP, CCSP, CISM)
• Proficient in English

Experience & Knowledge

• 3-5 years of hands-on experience in Information Security GRC, including architecture, review, and deployment of next-generation firewalls, WAFs, DLP, PAM, IAM solutions
• 3+ years implementing ISO standards, NIST frameworks, CIS benchmarking, and developing KPIs/KRIs
• Experience with enterprise-level integrations, DevSecOps lifecycle, and Cloud platforms (Azure, AWS, GCP), API management, and microservices architecture
• Ability to align information security strategies with technical projects and mitigate risks for digital transformation initiatives

Abilities & Specific Requirements

• Must be Emirati with Family Book
• Able to manage multiple priorities under pressure and meet deadlines
• Works effectively and responsibly without supervision
• Can execute clear strategies and corporate requirements
• Adaptable to start-up or fast-paced environments; flexible and agile thinker (Preferred)
• Applies a structured, analytical approach to challenges
• Demonstrates critical thinking and problem-solving capabilities