Information Security Specialist

edari; Dubai; Hybrid; AED 279,000 - 424,000; Full time

Job summary

edari is seeking an Information Security Specialist to protect government client IT infrastructure, applications, systems and information assets in Dubai. The role focuses on governance, risk assessments, security controls, and ISMS/ISR compliance within the Information Technology Department.

The 12-month renewable contract requires expertise in information security governance, risk assessment, threat identification, and control implementation to strengthen the organisation's security posture in

Qualifications

• Experience in governance, risk assessment and ISMS implementation and maintenance.
• Knowledge of ISR and ISMS frameworks and related controls.
• Strong ability to translate security requirements into technical controls.

Responsibilities

• Manage and support the organisation's information security environment in line with standards.
• Support ISR and ISMS frameworks compliance across the organisation.
• Investigate information security incidents and policy violations.
• Conduct information security risk assessments across IT infrastructure and applications.
• Monitor security controls and assess impact of changes and upgrades.
• Contribute to continuous improvement of information security policies and processes.
• Research new information security technologies to strengthen posture.
• Coordinate with suppliers on security solutions and contracts.
• Collaborate with IT/business teams to ensure service availability and SLAs.
• Ensure adherence to ISR, ISMS requirements and information security policies.
• Possess knowledge of security architecture, monitoring and incident response.
• Coordinate with internal teams and vendors to address security needs.

Skills

Information security

Risk assessment

Governance & compliance

Incident response

Security architecture

Job description

We are looking to hire an Information Security Specialist who will be responsible for managing and supporting information security governance, risk assessments, security controls, and compliance initiatives for our government client based in Dubai.

The role will be on 12-month renewable contract.

The role sits within the Information Technology Department.

We are looking for a passionate Information Security Specialist who is committed to protecting IT infrastructure, applications, systems, and information assets against security threats and vulnerabilities. You should also have experience in information security governance, risk assessment, security architecture, and compliance with information security frameworks, including Dubai Government's Information Security Regulation (ISR) and Information Security Management Systems (ISMS).

Key responsibilities:

• Manage and support the organisation's information security environment, ensuring IT infrastructure, networks, applications, and systems are protected against threats and vulnerabilities in line with recognised security standards.


• Support the implementation and ongoing compliance of Dubai Government's Information Security Regulation (ISR) and Information Security Management System (ISMS) frameworks.


• Investigate information security incidents, system misuse, unauthorised access attempts, and violations of information security policies.


• Conduct information security threat and risk assessments across IT infrastructure, applications, systems, and communications, recommending appropriate mitigation measures.


• Monitor and evaluate information security hardware and software performance, assessing the impact of vendor changes, system upgrades, and emerging technologies on the existing security environment.


• Contribute to the continuous improvement of information security policies, controls, processes, and technologies.


• Research, assess, and support the implementation of new information security technologies to strengthen the organisation's security posture.


• Coordinate with external suppliers and service providers on technical support, security solutions, contracts, and related requirements.


• Collaborate with internal IT and business teams to maintain the availability, reliability, and scalability of IT services in line with business requirements and service-level agreements (SLAs).


• Ensure adherence to organisational quality standards, information security policies, and applicable ISR and ISMS requirements.


• Proven experience in information security, cybersecurity, IT risk management, or information security governance.


• Practical experience with information security frameworks, preferably Dubai Government's ISR and ISMS requirements.


• Strong knowledge of information security risk assessments, threat identification, vulnerability management, and security control implementation.


• Experience assessing the security of IT infrastructure, networks, applications, systems, and communications.


• Understanding of information security policies, compliance requirements, audit processes, and remediation activities.


• Knowledge of security architecture, security monitoring, incident investigation, and information security technologies.


• Experience coordinating with internal IT teams, external vendors, and service providers to address security requirements and technical issues.


• Strong analytical, problem-solving, communication, and stakeholder management skills.


• Relevant certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor would be an advantage.

Availability:

• Preference will be given to candidates available immediately.