Senior Associate - Information Security

Summary

The Senior Associate – Information Security manages and monitors the organization’s information security framework, ensuring compliance with internal policies, regulatory standards, and industry best practices.

The role supports enterprise security, data governance, risk management, and business continuity initiatives; conducts security assessments and risk reviews; monitors cybersecurity controls and KPIs; and identifies and mitigates security risks across systems, vendors, and projects.

It also supports incident response, regulatory audits (including ISO and PCI), awareness initiatives, and continuous improvement of the organization’s security posture.

Requirements

Education & Skills

• Bachelor’s degree in a related field
• Master’s or specialization in Computer Science, Engineering, or IT (Preferred)
• Professional cybersecurity certification (e.g., CISSP, CCSP, CISM)
• Proficient in English
• Proficient in Arabic (Preferred)

Experience & Knowledge

• 5–10 years of hands-on experience in Information Security GRC, including architecture, review, and deployment of next-generation firewalls, WAFs, DLP, PAM, IAM solutions
• 5+ years implementing ISO standards, NIST frameworks, CIS benchmarking, and developing KPIs/KRIs
• Experience with enterprise-level integrations, DevSecOps lifecycle, and Cloud platforms (Azure, AWS, GCP), API management, and microservices architecture
• Ability to align information security strategies with technical projects and mitigate risks for digital transformation initiatives

Abilities & Specific Requirements

• Able to manage multiple priorities under pressure and meet deadlines
• Works effectively and responsibly without supervision
• Can execute clear strategies and corporate requirements
• Adaptable to start-up or fast-paced environments; flexible and agile thinker (Preferred)
• Applies a structured, analytical approach to challenges
• Demonstrates critical thinking and problem-solving capabilities