Security Analyst

Crescent Petroleum Company; Sharjah; On-site; AED 223,200 - 334,800; Full time

Job summary

Crescent Petroleum Company is seeking an information security professional based in Sharjah, UAE. The role involves monitoring ISO27001 adherence, conducting risk assessments, and developing security policies aligned with regulatory requirements. Candidates must possess a Bachelor’s degree in IT or Cybersecurity along with certifications such as CISSP or CISA. The ideal candidate will need to have experience in cloud security, data governance, and a solid grounding in networking concepts. Strong analytical and communication skills are essential for this role.

Qualifications

• Bachelor’s degree in a relevant field.
• Certifications: CISSP, CISA and/or CEH are mandatory.
• Technical knowledge of networking concepts and infrastructure.

Responsibilities

• Monitor and Maintain ISO27001 adherence.
• Conduct risk and gap assessments.
• Develop and maintain information security policies.

Skills

ISO27001 adherence

Risk assessments

Data governance

Cloud security

Analytical skills

Communication skills

Firewall protocols

Education

Bachelor’s degree in computer science, Information Technology, or Cybersecurity

CISSP, CISA and/or CEH certifications

Tools

Azure

Antivirus tools

IDS/IPS protocols

Job description

Responsibilities

• Monitor and Maintain ISO27001 adherance.
• Conduct risk and gap assessments to identify gaps in existing security governance
• Develop, maintain, and review information security policies, standards, procedures, and guidelines aligned with business objectives and regulatory requirements.
• Maintaining and improving the security technologies deployed, including creating use cases, customizing or better configuring the tools based on past and current threats.
• Develop and maintain data governance and data security
• Develop and conduct security awareness training programs
• Coordinate internal and external audits, including evidence collection, walkthroughs, and remediation tracking.
• Act as a liaison between security, IT, business units, and auditors to ensure consistent understanding of security and compliance requirements. Maintain documentation repositories for policies, procedures, risk assessments, and audit artifacts.
• Maintain the information security risk register and ensure risks are appropriately documented, prioritized, and tracked.

Required minimum qualification & experience

• Bachelor’s degree in computer science, Information Technology, or Cybersecurity.
• Certifications required: CISSP, CISA and/or CEH.

Minimum Professional Experience Required

• Technical knowledge of networking concepts and network infrastructure.
• Working knowledge of cloud security and data governance (e.g., Azure). Solid understanding of network and computer security, software security Strong analytical, documentation, and communication skills.
• Knowledge of ISO27001, NIST controls and implementation.
• Familiar with penetration and vulnerability testing. Familiar with antivirus, Firewall, IDS/IPS protocols.