Security Analyst

Role Purpose

We are seeking a highly motivated Security Analyst to join our Information Security team. The ideal candidate will have a strong blend of Governance, Risk, and Compliance (GRC) expertise and technical hands-on experience in managing enterprise and cloud security controls. The role focuses on implementing and maintaining compliance with key frameworks such as ISO 27001, PCI DSS, and data privacy regulations, while supporting cloud security, technical operations, vulnerability management, and incident response activities.

Key Accountabilities

• Implement and maintain compliance with ISO 27001, PCI DSS, NIST, and other relevant security frameworks.
• Conduct risk assessments, maintain the risk register, and ensure timely tracking of remediation activities.
• Perform third-party/vendor security assessments to evaluate and manage supply chain risks.
• Support data privacy assessments in alignment with GDPR, DIFC Privacy Law, NESA, and Dubai ISR.
• Coordinate and support Vulnerability Assessment and Penetration Testing (VAPT) activities, track remediation, and validate closure.
• Manage and maintain on-premises and cloud security tools and configurations such as SIEM, EDR, WAF, and Microsoft security features including Purview, Data Loss Prevention (DLP), and Privileged Identity Management (PIM).
• Implement and monitor cloud security controls across environments (Azure, AWS, or GCP), ensuring secure configurations, identity management, and compliance.

Required Experience, Skills & Qualifications

• Minimum 5 to 7 years of experience in Information Security, GRC, Cloud Security, or Technical Security Operations.
• Professional certifications preferred: CISSP, CISA, ISO 27001 LI/LA, CEH, CompTIA Security+,
• Master’s degree in computer science, Information Security, or a related field.

Desirable Skills

• Prior work experience within the UAE