Information Security Specialist

ZMI Holdings; Abu Dhabi; On-site; AED 120,000 - 180,000; Full time

Job summary

ZMI Holdings is seeking an Information Security Specialist to support the implementation, operation, and continuous improvement of the information security program. You will coordinate with the SOC and ICT teams, maintain compliance evidence, and assist with awareness initiatives to strengthen security posture.

The role emphasizes practical information security operations, cross-Functional collaboration, and proactive risk mitigation across ICT systems and business processes.

Qualifications

• Bachelor's degree in computer science, information security or related field.
• Minimum 2 years of practical experience in information security operations.
• Knowledge of SOC processes, vulnerability management, incident response and controls.

Responsibilities

• Support day-to-day information security activities with SOC and ICT teams.
• Assist in vulnerability management, remediation tracking and status updates.
• Support incident response by collecting information and documenting actions.
• Maintain security solutions such as SIEM, DLP, EDR, and firewalls.
• Perform access reviews and support IAM and identity controls.
• Prepare security reports, dashboards, and evidence for audits.
• Coordinate with infrastructure, network, applications, and business teams to ensure security requirements.

Skills

EDR

SIEM

DLP

Endpoint protection

Email security

Firewalls

MFA

IAM

Log analysis

Education

Bachelor's degree in Computer Science / Information Security

Job description

As an Information Security Specialist in ZMI, you will be responsible in supporting the implementation, operation, and continuous improvement of the organization's information security program. This role provides operational support for cybersecurity technologies and processes, coordinates with the Security Operations Center (SOC) and ICT teams to address security events, maintains security documentation and compliance evidence, and supports the delivery of security awareness initiatives. The role requires a proactive and detail-oriented professional with practical experience in information security operations, strong analytical and problem-solving skills, and the ability to collaborate effectively with cross-functional stakeholders.

Key responsibilities

• Support day-to-day information security activities, including monitoring alerts, reviewing logs, and following up on security events with the SOC and internal ICT teams.
• Assist in vulnerability management activities, including tracking scan results, coordinating remediation with system owners, and maintaining remediation status updates.
• Support incident response activities by collecting initial information, escalating alerts, documenting actions taken, and assisting with post-incident follow-up.
• Assist in maintaining and monitoring security solutions such as endpoint protection, email security, DLP, SIEM, vulnerability scanners, firewalls, and access control tools.
• Perform periodic access reviews and support identity and access management activities in line with approved policies and procedures.
• Assist in preparing security reports, dashboards, and evidence for internal reviews, audits, compliance requirements, and management reporting.
• Support the implementation of information security policies, standards, baselines, and procedures across ICT systems and business processes.
• Contribute to security awareness activities by assisting with awareness communications, phishing campaign follow-up, and user guidance on secure practices.
• Maintain accurate security documentation, including registers, checklists, remediation trackers, incident records, and compliance evidence.
• Coordinate with infrastructure, systems, network, application, and business teams to ensure security requirements are understood and followed.
• UAE National with a Family Book is preferred
• Bachelor’s degree in Computer science, Information Security, or related field.
• Minimum of 2 years of practical experience in information security, cybersecurity operations, SOC support, vulnerability management, endpoint/email security, access control, or related ICT security functions
• Good understanding of information security principles, cybersecurity threats, risks, and enterprise security controls.
• Working knowledge of Security Operations Center (SOC) processes, security monitoring, log analysis, and incident escalation.

Preferred Qualifications:

• Relevant associate-level security certification is preferred, such as CompTIA Security+, Microsoft SC-900/SC-200 Fundamentals or Associate level, ISO 27001 Foundation, or equivalent practical cybersecurity training.

Required Skills:

• Familiarity with cybersecurity technologies such as EDR, SIEM, DLP, endpoint protection, email security, firewalls, MFA, and IAM.
• Understanding of secure configuration, system hardening, patch management, and access control best practices.
• Knowledge of information security frameworks and standards, including ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and data protection requirements.
• Ability to support cybersecurity incident response through event triage, evidence collection, documentation, escalation, and post-incident activities.
• Strong analytical, troubleshooting, problem-solving, and risk assessment skills with attention to detail.
• Ability to prepare accurate security reports, dashboards, audit evidence, remediation trackers, and compliance documentation.
• Effective communication, stakeholder coordination, and collaboration skills, with the ability to work across ICT teams and business functions.