Information Security Specialist

ZMI Holdings; Abu Dhabi; On-site; AED 180,000 - 300,000; Full time

Job summary

ZMI Holdings is seeking an Information Security Specialist to support the organization's security program. You will help monitor security events, manage vulnerabilities, assist with incident response, and support ongoing protection across SOC and ICT teams.

With a focus on awareness, documentation, and compliance, you will contribute to security reports, dashboards, and evidence for audits while collaborating with cross-functional colleagues to strengthen defenses in Abu Dhabi and the UAE.

Qualifications

• 2+ years of practical information security experience in security operations or SOC support.
• Knowledge of security monitoring, log analysis, and incident escalation.
• Understanding of security principles, threats, and enterprise controls.
• Familiarity with ISO 27001, NIST, or CIS Controls is a plus.

Responsibilities

• Support day-to-day information security activities, including monitoring alerts and reviewing logs.
• Assist in vulnerability management and remediation tracking.
• Support incident response from information gathering to post-incident follow-up.
• Maintain security solutions such as endpoint protection, email security, DLP, SIEM, and firewalls.
• Coordinate with ICT teams to ensure security requirements are understood and followed.
• Prepare security reports, dashboards, and evidence for audits and management reporting.
• Assist in security policy implementation and awareness activities.

Skills

EDR

SIEM

DLP

Endpoint protection

MFA

IAM

Log analysis

Incident response

Education

Bachelor’s degree in Computer Science or Information Security

Job description

As an Information Security Specialist in ZMI, you will be responsible in supporting the implementation, operation, and continuous improvement of the organization's information security program. This role provides operational support for cybersecurity technologies and processes, coordinates with the Security Operations Center (SOC) and ICT teams to address security events, maintains security documentation and compliance evidence, and supports the delivery of security awareness initiatives. The role requires a proactive and detail-oriented professional with practical experience in information security operations, strong analytical and problem-solving skills, and the ability to collaborate effectively with cross-functional stakeholders.

Key responsibilities

• Support day-to-day information security activities, including monitoring alerts, reviewing logs, and following up on security events with the SOC and internal ICT teams.
• Assist in vulnerability management activities, including tracking scan results, coordinating remediation with system owners, and maintaining remediation status updates.
• Support incident response activities by collecting initial information, escalating alerts, documenting actions taken, and assisting with post-incident follow-up.
• Assist in maintaining and monitoring security solutions such as endpoint protection, email security, DLP, SIEM, vulnerability scanners, firewalls, and access control tools.
• Perform periodic access reviews and support identity and access management activities in line with approved policies and procedures.
• Assist in preparing security reports, dashboards, and evidence for internal reviews, audits, compliance requirements, and management reporting.
• Support the implementation of information security policies, standards, baselines, and procedures across ICT systems and business processes.
• Contribute to security awareness activities by assisting with awareness communications, phishing campaign follow-up, and user guidance on secure practices.
• Maintain accurate security documentation, including registers, checklists, remediation trackers, incident records, and compliance evidence.
• Coordinate with infrastructure, systems, network, application, and business teams to ensure security requirements are understood and followed.
• UAE National with a Family Book is preferred
• Bachelor’s degree in Computer science, Information Security, or related field.
• Minimum of 2 years of practical experience in information security, cybersecurity operations, SOC support, vulnerability management, endpoint/email security, access control, or related ICT security functions
• Good understanding of information security principles, cybersecurity threats, risks, and enterprise security controls.
• Working knowledge of Security Operations Center (SOC) processes, security monitoring, log analysis, and incident escalation.

Preferred Qualifications:

• Relevant associate-level security certification is preferred, such as CompTIA Security+, Microsoft SC-900/SC-200 Fundamentals or Associate level, ISO 27001 Foundation, or equivalent practical cybersecurity training.

Required Skills:

• Familiarity with cybersecurity technologies such as EDR, SIEM, DLP, endpoint protection, email security, firewalls, MFA, and IAM.
• Understanding of secure configuration, system hardening, patch management, and access control best practices.
• Knowledge of information security frameworks and standards, including ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and data protection requirements.
• Ability to support cybersecurity incident response through event triage, evidence collection, documentation, escalation, and post-incident activities.
• Strong analytical, troubleshooting, problem-solving, and risk assessment skills with attention to detail.
• Ability to prepare accurate security reports, dashboards, audit evidence, remediation trackers, and compliance documentation.
• Effective communication, stakeholder coordination, and collaboration skills, with the ability to work across ICT teams and business functions.