IT Compliance Officer

BlackStone eIT; Dubai; On-site; AED 120,000 - 180,000; Full time

Job summary

A leading company in Dubai seeks a cybersecurity professional to maintain security controls and manage risk assessments. The role includes monitoring security measures, conducting audits, and ensuring compliance with regulations. Ideal candidates will have extensive experience in cybersecurity and strong communication skills.

Benefits

Paid Time Off

Performance Bonus

Training & Development

Qualifications

• Minimum 5 years in cybersecurity, audits, or risk management.
• Knowledge of information security governance and compliance.

Responsibilities

• Maintain and enhance security controls and risk assessment frameworks.
• Conduct internal and external information security risk assessments.
• Document and report security control failures and gaps.

Skills

Incident Response Management

Risk Assessment

Communication

Troubleshooting

Confidentiality

Tools

SAP

Job description

Maintain and enhance existing security controls and risk assessment frameworks, ensuring documented and sustainable compliance that aligns with SEWA business objectives and applicable regulatory requirements.

Continuously monitor information security controls, exceptions, and risks.

Schedule regular assessments and testing of the effectiveness and efficiency of ISMS controls and existing system policies, and generate GRC reports.

Conduct internal and external information security risk and exception assessments.

Review IT system policies, assess security incidents, manage vulnerabilities, perform scans, check patching status, ensure secure baselines, and evaluate penetration test results, phishing, and social engineering tests and attacks.

Document and report information security control failures and gaps, provide remediation guidance, and prepare incident reports to track remediation activities.

Stay current on IT governance, information security risks, technologies, and compliance best practices.

Perform other related duties as assigned.

Requirements

Minimum Qualifications

Minimum 5 years of applied work experience in cybersecurity programs, audits, assessments, risk management, remediation, or information security compliance management.

Knowledge, Skills, and Abilities

• Knowledge of information security governance requirements, compliance principles, laws, rules, and regulations.
• Knowledge of SAP IT systems and processes, IT network infrastructure, data architecture, data processes, and protocols.
• Understanding of cyber and cloud security frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration.
• Knowledge of information systems auditing, monitoring, controlling, and assessment processes.
• Incident response management skills.
• Risk assessment and management methodologies.

Skills in:

• Security project study, management, and planning.
• Maintaining confidentiality.
• Troubleshooting and operating computers and various software packages.
• Defining problems, collecting and analyzing information, establishing facts, and drawing valid conclusions.

Abilities to:

• Effectively communicate technical issues to diverse audiences, both in writing and verbally.
• Apply a risk-based approach to planning, executing, and reporting on audit engagements and processes.
• Learn quickly and apply knowledge to new situations and business requirements.
• Handle sensitive and confidential matters, situations, and data.
• Understand and follow broad and complex instructions.
• Interact positively with management, staff, the public, and regulatory agencies to promote quality service.
• Work independently, prioritize multiple tasks, and adapt to changes as needed.

Benefits

• Paid Time Off
• Performance Bonus
• Training & Development