Security Compliance Specialist – Assurance Documentation

The Elite Job; Dubai; Hybride; AED 180 000 - 300 000; Plein temps

Avantages offerts par ce poste

Remote or Hybrid Opportunities

Professional Development Opportunities

Certification Support

Career Advancement

Résumé du poste

The Elite Job is actively seeking a Security Compliance Specialist – Assurance Documentation to support information security compliance, regulatory readiness, and assurance activities. The role collaborates with IT operations, risk, legal, privacy, internal audit, and business teams to maintain accurate documentation and audit-ready evidence.

The ideal candidate will translate technical requirements into clear documentation, maintain control narratives, and drive continuous improvement of

Qualifications

• Strong understanding of information security governance, risk and compliance principles.
• Ability to translate technical requirements into audit-ready documentation.
• Familiarity with ISO 27001, SOC 2, NIST or CIS Controls.
• Experience reviewing control evidence and audit documentation.

Responsabilités

• Develop, review, and organize information security policies and procedures.
• Prepare audit evidence packages, control narratives, and compliance summaries.
• Coordinate evidence collection and validate documentation against controls.
• Track remediation actions and maintain version histories.
• Support internal and external audits and customer security assessments.

Connaissances

Governance & compliance

Analytical thinking

Documentation excellence

Attention to detail

Stakeholder coordination

Formation

Bachelor’s degree in IT/CS/Cybersecurity

Experience in audit documentation

Outils

Microsoft Word

Excel

SharePoint

Confluence

Description du poste

1. Job Summary

The Elite Job is seeking a detail-oriented and analytical Security Compliance Specialist – Assurance Documentation to support information security compliance, regulatory readiness, internal control assessments, and security assurance activities. The successful candidate will be responsible for preparing, maintaining, reviewing, and organizing security compliance documentation to demonstrate that the organizations systems, processes, and operational practices meet applicable security standards, contractual obligations, and regulatory requirements.

This role involves working closely with information security, IT operations, risk management, legal, privacy, internal audit, and business teams to ensure that security policies, procedures, control descriptions, evidence records, and assurance reports remain accurate, complete, and up to date.

The ideal candidate will have a strong understanding of information security governance, risk and compliance principles, documentation management, and audit support processes. They should be capable of translating technical security requirements into clear, structured, and verifiable documentation that can be understood by technical teams, management, auditors, and external stakeholders.

The Security Compliance Specialist will also help identify documentation gaps, coordinate evidence collection, track remediation activities, and improve the efficiency of compliance workflows. This position is well suited to professionals who enjoy structured problem-solving, maintaining high documentation standards, and helping organizations build a strong and transparent security compliance framework.

2. Key Responsibilities

Security Compliance Documentation

Develop, review, maintain, and organize information security policies, standards, procedures, guidelines, and supporting documentation.

Prepare security assurance documents that describe internal controls, operational safeguards, risk mitigation measures, and compliance processes.

Ensure that documentation accurately reflects implemented security controls and established organizational practices.

Maintain document registers, version histories, approval records, review schedules, and ownership assignments.

Ensure that all compliance documents follow approved templates, formatting standards, naming conventions, and document-retention requirements.

Audit and Assurance Support

Support internal audits, external audits, customer security assessments, and third-party assurance reviews.

Coordinate the collection and validation of evidence demonstrating the implementation and effectiveness of security controls.

Prepare audit evidence packages, control narratives, compliance summaries, and supporting records.

Respond to documentation requests from auditors, customers, business partners, and authorized internal stakeholders.

Track audit findings, documentation deficiencies, corrective actions, and outstanding evidence requests.

Work with relevant teams to ensure that audit observations are addressed within agreed timelines.

Security Framework and Regulatory Alignment

Support compliance activities associated with relevant frameworks and standards, such as ISO/IEC 27001, SOC 2, NIST Cybersecurity Framework, and CIS Controls, as applicable to the organization.

Map internal security controls to applicable framework requirements and identify areas where additional documentation or clarification is needed.

Assist with maintaining compliance matrices, control mapping registers, risk registers, and statements of applicability where relevant.

Monitor changes to applicable security requirements and help assess their impact on existing documentation.

Support the preparation of evidence and documentation for customer due diligence questionnaires and supplier security assessments.

Evidence Management and Control Verification

Collect and organize evidence from security, infrastructure, application development, identity and access management, incident response, and business continuity teams.

Verify that submitted evidence is relevant, readable, appropriately dated, and aligned with the requested control requirements.

Identify missing, outdated, inconsistent, or insufficient evidence and coordinate follow-up actions with control owners.

Maintain traceability between compliance requirements, documented controls, supporting evidence, and remediation activities.

Handle confidential security documentation in accordance with approved access controls and information-handling procedures.

Risk Management and Remediation Tracking

Assist in identifying documentation-related compliance gaps, control weaknesses, and potential audit risks.

Maintain records of nonconformities, corrective actions, risk treatments, and remediation progress.

Collaborate with control owners to document root causes, corrective measures, responsible parties, and expected completion dates.

Escalate overdue actions, recurring documentation gaps, and significant compliance concerns to the appropriate stakeholders.

Contribute to continuous improvement initiatives designed to strengthen control accountability and audit readiness.

Stakeholder Collaboration and Reporting

Work with cross-functional teams to obtain accurate information about security controls and operational procedures.

Translate technical information into concise, professional, and audit-ready documentation.

Prepare periodic compliance status reports, evidence trackers, documentation dashboards, and management summaries.

Coordinate document reviews and approvals with subject‑matter experts and designated stakeholders.

Support awareness initiatives that help employees understand documentation responsibilities and compliance expectations.

Continuous Improvement

Identify opportunities to standardize templates, automate repetitive documentation tasks, and improve evidence collection processes.

Maintain centralized documentation repositories and ensure that information is accessible only to authorized personnel.

Recommend improvements to document lifecycle management, review workflows, and compliance tracking tools.

Participate in internal process reviews and help establish measurable improvements in documentation quality and audit preparation.

3. Required Skills and Qualifications

Educational Qualifications

Bachelors degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Business Administration, or a related field.

Equivalent practical experience in information security compliance, governance, risk management, quality assurance, or audit documentation may be considered.

Relevant professional certifications are advantageous but not mandatory for every candidate.

Technical and Compliance Knowledge

Working knowledge of information security governance, risk, and compliance principles.

Understanding of security policies, procedures, control objectives, evidence requirements, and audit documentation practices.

Familiarity with one or more information security frameworks, such as ISO/IEC 27001, SOC 2, NIST, or CIS Controls.

Basic understanding of access management, vulnerability management, incident response, data protection, backup procedures, and business continuity.

Ability to review technical evidence and determine whether it supports a stated security control.

Familiarity with risk registers, compliance matrices, corrective action logs, and control testing records.

Understanding of confidentiality, information classification, document retention, and secure records management.

Documentation and Communication Skills

Excellent written English with strong grammar, editing, proofreading, and formatting skills.

Ability to prepare clear, consistent, professional, and well-structured compliance documentation.

Strong attention to detail when reviewing records, evidence, dates, approvals, and version histories.

Ability to simplify technical concepts without compromising accuracy.

Professional communication skills for coordinating requests and following up with multiple stakeholders.

Ability to maintain confidentiality when working with sensitive organizational and security information.

Software and Tools

Proficiency in Microsoft Word, Excel, PowerPoint, Outlook, and document collaboration tools.

Familiarity with SharePoint, Confluence, Google Workspace, or similar documentation platforms.

Experience with GRC platforms, audit management software, ticketing systems, or compliance evidence repositories is an advantage.

Ability to maintain structured spreadsheets, evidence trackers, control registers, and reporting dashboards.

Basic knowledge of workflow automation and document management practices is desirable.

4. Experience

Candidates with experience in information security compliance, audit coordination, risk management, quality assurance, or documentation management are encouraged to apply.

Preferred experience includes:

• Approximately 1–4 years of experience in security compliance, GRC, internal audit support, IT governance, or related documentation roles.
• Experience preparing or maintaining policies, procedures, control descriptions, audit evidence, and compliance records.
• Exposure to internal or external audits, customer security questionnaires, or third-party risk assessments.
• Experience coordinating documentation requests across technical and non-technical teams.
• Familiarity with evidence collection, document version control, and remediation tracking.
• Experience working in regulated industries, technology companies, financial services, healthcare, or enterprise IT environments is beneficial.

Candidates with limited professional experience may also be considered if they demonstrate strong documentation skills, relevant academic knowledge, attention to detail, and a willingness to learn. Experience requirements may vary depending on the level of the position.

5. Working Hours

Employment Schedule: Full-time, subject to the agreed employment contract.

Typical Working Hours: Approximately 8 hours per day, generally 40 hours per week.

Work Arrangement: Remote, hybrid, or office-based, depending on the specific vacancy and operational requirements.

Flexibility: Some flexibility may be available to coordinate with international teams, audit schedules, and compliance deadlines.

Meetings: Employees may be required to attend virtual meetings, documentation reviews, audit preparation sessions, and stakeholder discussions.

Peak Periods: Additional coordination may be necessary during scheduled audits, external assessments, regulatory reviews, or major compliance deadlines.

The final working schedule, time zone, leave entitlement, and any overtime arrangements will be communicated during the recruitment process.

6. Knowledge, Skills, and Abilities

Knowledge

Information security governance and compliance documentation principles.

Internal control design, control ownership, and evidence requirements.

Security assurance processes and audit preparation practices.

Risk assessment, corrective action tracking, and compliance monitoring.

Document lifecycle management, records retention, and version control.

Common information security standards and frameworks relevant to organizational operations.

Skills

Strong analytical thinking and structured problem-solving.

Excellent document preparation, editing, proofreading, and quality review.

Ability to organize large volumes of information systematically.

Strong prioritization and time-management skills.

Effective stakeholder coordination and professional follow-up.

Ability to identify inconsistencies, missing information, and documentation gaps.

Competence in preparing compliance trackers, reports, and evidence summaries.

Sound judgment when handling confidential and sensitive information.

Abilities

Ability to work independently while collaborating effectively with cross-functional teams.

Ability to manage multiple documentation requests without compromising quality.

Ability to understand technical information and present it in a clear, audit-ready format.

Ability to meet deadlines and maintain accurate records in a changing compliance environment.

Ability to adapt to updated security standards, internal policies, and regulatory expectations.

Ability to raise concerns professionally and escalat[sic] significant documentation or compliance gaps.

Commitment to integrity, confidentiality, accountability, and continuous learning.

7. Benefits

The Elite Job aims to provide a professional working environment that supports employee development, collaboration, and long-term career growth. Benefits for this position will depend on the applicable employment agreement and the specific vacancy.

Potential benefits may include:

• Competitive Compensation: Salary aligned with the candidates qualifications, experience, and role responsibilities.
• Remote or Hybrid Opportunities: Flexible working arrangements where available and approved.
• Professional Development: Opportunities to strengthen knowledge of information security governance, compliance, and assurance practices.
• Certification Support: Potential access to approved training or certification assistance, subject to company policy.
• Career Advancement: Opportunities to progress into senior compliance, GRC, information security assurance, audit, or risk management positions.
• Collaborative Environment: Opportunities to work with IT, cybersecurity, audit, risk, and business professionals.
• Structured Work Processes: Exposure to established documentation standards, control frameworks, and compliance management practices.
• Employee Support: Applicable leave, employee assistance, and other benefits as specified in the employment agreement.
• All compensation, benefits, training allowances, and flexibility arrangements should be confirmed in the official offer.

8. Why Join The Elite Job?

Joining The Elite Job as a Security Compliance Specialist – Assurance Documentation offers an opportunity to contribute to the development and maintenance of strong information security governance practices. This role is particularly suitable for professionals who value accuracy, structured processes, accountability, and the importance of reliable evidence in demonstrating security compliance.

In this position, you will have the opportunity to develop practical experience in compliance documentation, audit readiness, risk management, control mapping, and stakeholder coordination. You will also strengthen your ability to communicate technical requirements clearly and contribute to initiatives that improve documentation quality and operational consistency.

The role can provide a foundation for future career opportunities in information security governance, risk and compliance, cybersecurity assurance, internal audit, security program management, and regulatory compliance.

The Elite Job welcomes candidates who demonstrate professionalism, integrity, curiosity, and a commitment to continuous improvement. If you enjoy organizing complex information, solving documentation challenges, and helping teams maintain high compliance standards, this position may be an excellent opportunity to develop your career.